Health Law Advisor

DECEMBER 5, 2022

The bulletin advises that “[r]egulated entities are not permitted to use tracking technologies in a manner that would result in impermissible disclosures of Protected Health Information (“PHI”) to tracking technology vendors or any other violations of the HIPAA Rules.” According to HHS, unauthenticated webpages (i.e.,

HIPAA 98

HIPAA Doctors Health Insurance Compliance 98

Healthcare IT Today

OCTOBER 25, 2023

The following is a guest article by Dr. Sriram Rajagopalan , Enterprise Agile Evangelist at Inflectra Today’s most significant risk regarding security and privacy issues in health services is consumers’ need for more awareness of personal health information. So, HIPAA may not apply. What do I mean?

HIPAA 91

HIPAA Licensing Doctors Nurses 91

HIPAA Journal

AUGUST 4, 2023

Healthcare and financial services were the two most attacked industries, according to Blackberry’s latest Global Threat Intelligence Report. Amadey has information stealing capabilities and is often used to perform reconnaissance before downloading additional malicious payloads. million attacks at a rate of around 11.5

Ransomware 79

Ransomware Governance HIPAA 79

HIPAA Journal

DECEMBER 31, 2022

One of the questions we are sometimes asked is how to report a HIPAA violation anonymously. Consequently, it is not possible to report a HIPAA violation anonymously via the OCR Complaints Portal. You can download a complaint form , complete it, send it to OCR by mail or as an email attachment.

HIPAA 93

HIPAA Medicaid Medicaid Medicare 93

HIPAA Journal

JANUARY 30, 2023

The National HIPAA Summit is the leading forum on healthcare EDI, privacy, breach notification, confidentiality, data security, and HIPAA compliance, and the deadline for registration for the Virtual 40th National HIPAA Summit is fast approaching.

US Department of Health and Human Services 81

US Department of Health and Human Services HIPAA Compliance Medicaid 81

Healthcare IT Today

OCTOBER 20, 2023

The following is a guest article by Nate MacLeitch , Founder and CEO at QuickBlox The demand for AI-powered Communications Platform as a Service (CPaaS) in healthcare is evident: 75% of executives believe that generative AI has reached a stage where it is poised to reshape the healthcare industry.

HIPAA 83

HIPAA Informed Consent Nurses Compliance 83

Compliancy Group

SEPTEMBER 23, 2022

If any positives resulted from the Covid-19 pandemic and the associated chaos surrounding it, count the accelerated acceptance of telehealth services as one of them. offers a no-download-required browser-based option that claims to be a proper telemedicine solution. truly HIPAA compliant? What Are HIPAA Safeguards?

HIPAA 52

HIPAA Compliance COVID-19 Telemedicine 52

Compliancy Group

FEBRUARY 21, 2023

Is it a HIPAA violation to email medical records? Are You Using a HIPAA Compliant Email Provider? Not all email service providers are HIPAA compliant. Most services will only sign a BAA with paid users. Learn more about HIPAA compliant email encryption. Become HIPAA Compliant × Get HIPAA Compliant!

HIPAA 52

HIPAA Compliance 52

American Medical Compliance

FEBRUARY 15, 2023

The courses include module quizzes, downloadable materials, individual support, and questions for test preparation. They are tasked to ensure that all personnel is providing the best services available. Buy Course Today The post HIPAA Training For Emergency Medical Services (EMS) appeared first on American Medical Compliance.

HIPAA 52

HIPAA Compliance Nursing Homes Nurses 52

Compliancy Group

MAY 5, 2023

As healthcare professionals continue to work from home, many are facing the challenge of ensuring that they remain HIPAA compliant in a remote environment. HIPAA (Health Insurance Portability and Accountability Act) is a federal law that requires healthcare providers to secure protected health information (PHI) and maintain its privacy.

HIPAA 52

HIPAA Compliance Health Insurance Doctors 52

HIPAA Journal

DECEMBER 2, 2022

The HHS’ Office for Civil Rights has issued a bulletin confirming that the use of third-party tracking technologies on websites, web applications, and mobile apps without a business associate agreement (BAA) is a HIPAA violation if the tracking technology collects and transmits individually identifiable health information.

HIPAA 104

HIPAA Compliance Hospitals Fraud 104

HIPAA Journal

MAY 6, 2024

The affected individuals have been offered complimentary credit monitoring and identity theft protection services for 12 months. The post Continuum Health Alliance Data Breach Affects 377,000 Consensus Medical Group Patients appeared first on HIPAA Journal.

HIPAA 106

HIPAA Hospitals 106

Compliancy Group

JANUARY 18, 2022

But the best tool to prevent small practice cybercrime can be as basic as having a truly effective HIPAA compliance strategy. For HIPAA compliance to help prevent small practice cybercrime, it must address the particulars of your practice. You may be just as exposed to cybercrime as before and likely not even truly HIPAA compliant.

HIPAA 52

HIPAA Compliance Ransomware Malpractice 52

Total HIPAA

JULY 12, 2021

Many HIPAA compliant organizations need to send and receive electronic Protected Health Information (ePHI) on a regular basis. HIPAA requires you to secure information at rest, in transit, and in storage. HIPAA compliant efax services are an ideal replacement for traditional fax machines many businesses are phasing out.

HIPAA 52

HIPAA Compliance COVID-19 52

HIPAA Journal

APRIL 24, 2024

Manidant, part of Google Cloud, is a leading provider of dynamic cyber defense, threat intelligence, and incident response services. The most common malware families were backdoors (33%), downloaders (16%), droppers (15%), credential stealers (7%) and ransomware (5%).

Ransomware 88

Ransomware HIPAA Hospitals 88

HIPAA Journal

AUGUST 10, 2023

Missouri Department of Social Services The Missouri Department of Social Services (DSS) has confirmed that the data of Medicaid recipients was compromised in the recent mass MOVEit hacks by the Clop threat group. Affected individuals have been offered complimentary credit monitoring services.

Medicaid 52

Medicaid Medicaid Health Insurance HIPAA 52

Healthcare It News

JUNE 13, 2023

The company provides cloud and other services, which integrate with electronic health records and other systems, and a full stack for developing digital applications. Users can build HIPAA-compliant healthcare applications, for example, and MOVEit controls data transfers with encryption, tracking and access controls.

Ransomware 217

Ransomware Public Health HIPAA 217

Compliancy Group

DECEMBER 7, 2022

The Department of Health and Human Services (HHS) recently issued a guidance bulletin to raise awareness of the inappropriate use of online tracking technologies. The topic of appropriate use of online tracking technology and HIPAA is discussed in greater detail below. Make Sure You’re HIPAA Compliant. Learn More! ×

HIPAA 52

HIPAA Compliance Doctors 52

HIPAA Journal

JUNE 16, 2022

The Department of Health and Human Services (HHS)’ Office of the National Coordinator for Health Information Technology (ONC) and the Office for Civil Rights (OCR) have released a new version of the HHS Security Risk Assessment (SRA) Tool. Risk analyses/assessments are vital for HIPAA compliance.

HIPAA 93

HIPAA Compliance 93

Compliancy Group

APRIL 25, 2022

Even when you do the best you can to comply with HIPAA regulations, violations and breaches may occur. What happens after a HIPAA complaint is filed? Common Violation Examples – What Happens After a HIPAA Complaint is Filed? Common Violation Examples – What Happens After a HIPAA Complaint is Filed? Learn More! ×

HIPAA 52

HIPAA Compliance Ransomware 52

Total HIPAA

NOVEMBER 29, 2021

Firstly, make sure you have audited a Business Associate or Subcontractor’s HIPAA compliance program before signing a Business Associate Agreement (BAA) with them, and do so again each year before you resign the agreement. So, what are considered “in-scope services”?

HIPAA 52

HIPAA Compliance Governance 52

Healthcare It News

JANUARY 30, 2023

Department of Health and Human Services unauthorized access/disclosure that involved protected health information of 66,372 individuals, according to the Office for Civil Rights cases under investigation list. The email marketing service provider temporarily suspended those accounts to protect user data.

Electronic Medical Records 232

Electronic Medical Records HIPAA Doctors 232

HIPAA Journal

APRIL 7, 2023

The average enterprise healthcare user interacts with 22 cloud apps a month, with 94% of enterprise healthcare users downloading data from cloud apps each month. Downloaders are also commonly distributed via cloud apps, followed by file-based exploits for exploiting known unpatched vulnerabilities, information stealers, and backdoors.

HIPAA 91

HIPAA 91

Total HIPAA

MARCH 1, 2021

Jason Karn, Total HIPAA’s Chief Compliance Officer, recently talked with David Smith, a nationally recognized healthcare benefits consultant and regulatory expert, to discuss HIPAA regulation during the COVID-19 pandemic. You can listen to this episode of our podcast HIPAA Talk here or on your mobile device via Apple Podcasts.

COVID-19 52

COVID-19 HIPAA Compliance Compliance Officers 52

Total HIPAA

JUNE 2, 2020

HIPAA compliant file sharing apps are necessary if your company is dealing with personal health data. Most importantly, all the products reviewed are HIPAA compliant file sharing applications. HIPAA compliant file sharing apps that we reviewed are following: Accellion Box Dropbox Egnyte FTP Today G Suite OneDrive ShareFile Syncplicity.

HIPAA 52

HIPAA Compliance Licensing Regulatory Compliance 52

MedTrainer

MAY 16, 2024

Download the Ultimate List of Training Requirements for Ambulatory Surgery Centers to see a full list of federal and accreditation training requirements for ASC staff broken down by role, with the applicable standard, CMS violation category, and frequency. Staff should review the requirements for their specific state to remain in compliance.

Compliance 52

Compliance HIPAA Health Insurance Medicaid 52

HIPAA Journal

OCTOBER 7, 2022

On August 5, 2022, Anthem discovered that an unauthorized individual had gained access to a database and downloaded files containing plan members’ protected health information, including names, addresses, dates of birth, phone numbers, email addresses, Medicare ID numbers, and Medicaid ID numbers.

HIPAA 95

HIPAA Health Insurance Medicaid Medicaid 95

AIHC

FEBRUARY 7, 2024

This article provides a basic overview of Artificial Intelligence, Telehealth, Asynchronous Services and HIPAA privacy concerns. Telehealth refers to a collection of methods to enhance health care delivery and education — it’s not a specific service. This information is not intended as legal or consulting advice.

HIPAA 59

HIPAA Medicaid Medicaid Telemedicine 59

AIHC

APRIL 10, 2024

HITECH is a critical aspect of the Health Insurance Portability & Accountability Act (HIPAA). Since 2009, HITECH has given “teeth” to HIPAA law. What’s the difference between HIPAA and HITECH? HIPAA guarantees patients access to their paper medical records. This act was signed into law by President Obama back in 2009.

Compliance 99

Compliance US Department of Health and Human Services HIPAA Electronic Medical Records 99

HIPAA Journal

MAY 9, 2023

Notification letters have already started to be sent to affected individuals, who have been offered complimentary credit monitoring and identity theft protection services for 24 months. According to the listings, files were encrypted on March 27, 2023; however, Albany ENT and Allergy Services has yet to announce a cyberattack on its website.

Ransomware 116

Ransomware HIPAA Doctors 116

MedTrainer

JANUARY 10, 2024

Review Recent Compliance Changes There is a major shift in compliance priorities toward addressing health inequities and improving access to quality healthcare services. Download a toolkit with everything you need to know about USP <800> compliance. Evaluate your current infection control and prevention plan.

Compliance 94

Compliance Fraud HIPAA Compliance Officers 94

HIPAA Journal

JUNE 29, 2022

On June 25, 2022, a spokesperson for a threat group called DAIXIN Team contacted HIPAA Journal to share information about a ransomware attack and data theft incident at Fitzgibbon Hospital in Marshall, Missouri. DAIXIN Team was previously not known to HIPAA Journal and appears to be a new ransomware group.

Ransomware 116

Ransomware Hospitals HIPAA Health Insurance 116

AIHC

FEBRUARY 7, 2024

This article provides a basic overview of Artificial Intelligence, Telehealth, Asynchronous Services and HIPAA privacy concerns. Telehealth refers to a collection of methods to enhance health care delivery and education — it’s not a specific service. This information is not intended as legal or consulting advice.

HIPAA 52

HIPAA Medicaid Medicaid Telemedicine 52

HIPAA Journal

DECEMBER 1, 2022

An unauthorized individual was found to have gained access to its network and downloaded files containing the protected health information of 45,785 patients. Health Plan Member Data Potentially Compromised in Innovative Service Technology Management Services Ransomware Attack.

Health Insurance 98

Health Insurance Ransomware HIPAA Governance 98

HIPAA Journal

JANUARY 31, 2024

Report: Security Breaches in Healthcare (Direct Download PDF, 1.9MB, 16 pages) An unwanted record was set in 2023 with 725 large security breaches in healthcare reported to the Department of Health and Human Services (HHS) Office for Civil Rights (OCR), beating the record of 720 healthcare security breaches set the previous year.

Ransomware 118

Ransomware HIPAA Hospitals Compliance 118

HIPAA Journal

MAY 18, 2023

Once credentials are obtained, the group deploys a custom backdoor specific to each victim, and commercially available remote access tools are downloaded such as TeamViewer, Atera Agent, SplashTop, and AnyDesk. The best defense against attacks is to limit the use of RDP and other remote desktop services.

Ransomware 89

Ransomware Public Health HIPAA 89

Healthcare IT Today

DECEMBER 15, 2023

Simply open a mobile app and download the report to your smartphone. In Europe, this is GDPR (General Data Protection Regulation), in America, it’s HIPAA (Health Insurance Portability and Accountability Act). AWS solutions require software compatible with HIPAA standards.

Electronic Medical Records 105

Electronic Medical Records Doctors HIPAA Hospitals 105