HIPAA Journal

JUNE 26, 2023

HIPAA enforcement discretion occurs when the Secretary for Health and Human Services (HHS) announces the Department will exercise discretion in the enforcement of HIPAA Rules. Typically, Notices of Enforcement Discretion last between 72 hours and 60 days, are state or region-specific and apply to specific provisions of the HIPAA Rules.

HIPAA 72

HIPAA COVID-19 COVID-19 Vaccine Public Health 72

HIPAA Journal

MAY 29, 2023

It has been 27 years since President Clinton signed the Health Insurance Portability and Accountability Act (HIPAA) into law, but compliance is still proving a challenge for many HIPAA-regulated entities. The average HIPAA penalty has fallen from $2.6 reduction in total penalties compared to 2018, falling from $28.7

HIPAA 97

HIPAA Compliance Due Diligence COVID-19 97

HIPAA Journal

APRIL 14, 2023

The Iowa Department of Health and Human Services (DHHS) has confirmed that the personal information of 20,800 Iowans who receive Medicaid was exposed in a cyberattack at a subcontractor of one of its business associates between June 30, 2022, and July 5, 2022. Telligen performs annual assessments on Medicaid recipients for the Iowa DHSS.

Medicaid 96

Medicaid Medicaid Ransomware HIPAA 96

MedTrainer

JANUARY 12, 2024

Healthcare facilities, from hospitals and clinics to insurance providers, are deeply affected by the regulations set forth by the Health Insurance Portability and Accountability Act (HIPAA). How does HIPAA compliance affect healthcare facilities? What is Healthcare Compliance?

HIPAA 52

HIPAA Compliance Health Insurance Hospitals 52

Compliancy Group

JULY 15, 2022

A 2016 hacking incident that hit Oklahoma State University’s Center for Health Sciences has led to an $875,000 HIPAA breach fine settlement to address potential violations. Background of Oklahoma State University HIPAA Breach. The university announced the HIPAA breach on January 5, 2018. failure to perform an evaluation .

HIPAA 97

HIPAA Medicaid Medicaid Compliance 97

HIPAA Journal

JUNE 8, 2023

The Iowa Department of Health and Human Services has announced there have been three separate breaches of the protected health information of Iowa Medicaid recipients in the past two months – two hacking incidents and an impermissible disclosure, all three of which involved third-party contractors.

Medicaid 82

Medicaid Medicaid Ransomware Health Insurance 82

HIPAA Journal

DECEMBER 31, 2022

One of the questions we are sometimes asked is how to report a HIPAA violation anonymously. Consequently, it is not possible to report a HIPAA violation anonymously via the OCR Complaints Portal. HHS´ Office for Civil Rights is not the only “enforcer” of HIPAA. How Else to Report a HIPAA Violation Anonymously.

HIPAA 94

HIPAA Medicaid Medicaid Medicare 94

Total Medical ComplianceHIPAA

JANUARY 11, 2024

HIPAA stands as a beacon of privacy and security standards within the industry. These screenings search through various databases containing records of individuals or organizations barred from participating in Medicaid, Medicare, or other federal/state healthcare programs due to fraud, abuse, or other offenses.

HIPAA 52

HIPAA Regulatory Compliance Malpractice Compliance 52

HIPAA Journal

JANUARY 30, 2023

The National HIPAA Summit is the leading forum on healthcare EDI, privacy, breach notification, confidentiality, data security, and HIPAA compliance, and the deadline for registration for the Virtual 40th National HIPAA Summit is fast approaching.

US Department of Health and Human Services 84

US Department of Health and Human Services HIPAA Compliance Medicaid 84

HIPAA Journal

SEPTEMBER 11, 2023

Care Health Plan, has settled multiple violations of the HIPAA Privacy and Security Rules with the HHS’ Office for Civil Rights (OCR) and will pay a $1,300,000 penalty and adopt a robust corrective action plan. OCR determined that there had been several failures to fully comply with the requirements of the HIPAA Privacy and Security Rules.

HIPAA 72

HIPAA Compliance Medicaid Medicaid 72

Compliancy Group

FEBRUARY 9, 2023

Navigating the complexities of HIPAA compliance takes work, especially for healthcare providers and their vendors. Because of the vague nature of the law and the fact that HIPAA compliance is an all-or-nothing endeavor, too many organizations depend on hope more than knowledge. Learn More × Get HIPAA Compliant! Please Wait.

HIPAA 52

HIPAA Compliance Regulations Compliance Medicaid 52

HIPAA Journal

NOVEMBER 21, 2022

million being defrauded from Medicaid, Medicare, and private health insurance programs. Five state Medicaid programs, two Medicare Administrative Contractors, and two private health insurers were tricked into changing the bank account details for payments. Medicare, Medicaid, and private health insurers suffered losses of more than $4.7

Medicaid 78

Medicaid Medicaid Medicare Medicare 78

HIPAA Journal

OCTOBER 21, 2022

There are – and always have been – gaps in HIPAA and, after more than a quarter of a century, some have yet to be addressed. Most of the gaps in HIPAA are attributable to omissions from the original Act, provisions of HIPAA and HITECH that have never been enacted, and the increasing use of technology in healthcare.

HIPAA 99

HIPAA Compliance Medicare Medicare 99

Fierce Healthcare

SEPTEMBER 11, 2023

million people in Medicaid, Medicare, and Affordable Care Act plans, was ordered to shore up its data protection systems. Care, which provides coverage for about 2.9

HIPAA 118

HIPAA Medicaid Medicaid Medicare 118

Total HIPAA

JANUARY 18, 2022

HIPAA breaches involving fewer than 500 individuals which occurred during 2021 must be reported to the US Department of Health and Human Services (HHS) by Tuesday, March 1, 2022. Reporting HIPAA Breaches: When Should I Contact HHS? Reporting HIPAA Breaches: When Should I Contact HHS? Definition of HIPAA Breaches.

HIPAA 92

HIPAA US Department of Health and Human Services Compliance Medicaid 92

HIPAA Journal

FEBRUARY 8, 2024

Department of Health & Human Services Office of Inspector General (HHS-OIG) has published a Roadmap for New Physicians on avoiding Medicare and Medicaid fraud and abuse. The post Advice for New Physicians on Avoiding Medicare and Medicaid Fraud and Abuse appeared first on HIPAA Journal.

Fraud 40

Fraud Medicaid Medicaid Medicare 40

HIPAA Journal

AUGUST 10, 2023

Missouri Department of Social Services The Missouri Department of Social Services (DSS) has confirmed that the data of Medicaid recipients was compromised in the recent mass MOVEit hacks by the Clop threat group. It is currently unclear exactly how many Medicaid recipients were affected.

Medicaid 52

Medicaid Medicaid Health Insurance HIPAA 52

Med-Net Compliance

JULY 25, 2022

The Office for Civil Rights (OCR) at the US Department of Health and Human Services (HHS) announced the resolution of eleven investigations in its Health Insurance Portability and Accountability Act (HIPAA) Right of Access Initiative, bringing the total number of these enforcement actions to thirty-eight since the initiative began.

HIPAA 59

HIPAA US Department of Health and Human Services Nursing Homes Nurses 59

Healthcare It News

JUNE 13, 2023

Uber Health launched its HIPAA-enabled API and dashboard in 2018 to offer logistics services to population health management programs. KFF's online Medicaid Waiver Tracker has information on which state Medicaid programs are granted 1115 waivers.

Medicaid 200

Medicaid Medicaid HIPAA Hospitals 200

Bill of Health

OCTOBER 26, 2022

In the post- Dobbs fight to safeguard reproductive healthcare, a new spotlight has been placed on two existing federal laws: the Health Insurance Portability and Accountability Act (HIPAA) and the Emergency Medical Treatment and Active Labor Act (EMTALA). . OCR HIPAA Privacy Rule Guidance. The Old Laws.

HIPAA 184

HIPAA Medicare Medicare Medicaid 184

Compliancy Group

SEPTEMBER 11, 2023

As guardians of privacy and security in the realm of protected health information (PHI), OCR enforces the HIPAA: Privacy Rule Security Rule Breach Notification Rule These set forth the mandatory obligations of HIPAA-regulated entities. Schedule a Demo See the software that makes getting compliant a breeze! Please Wait.

HIPAA 52

HIPAA Compliance Medicaid Medicaid 52

HIPAA Journal

APRIL 29, 2024

The information exposed or stolen in the incident included names, addresses, dates of birth, Social Security numbers, health insurance policy numbers, Medicare or Medicaid numbers, state or governmental ID numbers, passport numbers, and medical information. Million Record MSP Data Breach appeared first on HIPAA Journal.

Health Insurance 96

Health Insurance Health Analytics HIPAA Medicaid 96

HIPAA Journal

AUGUST 14, 2023

Several other HIPAA-regulated entities have confirmed that they have been affected. The Colorado Department of Health Care Policy and Financing , which oversees the state’s Medicaid program and the Child Health Plan Plus (CHP+) program, was also affected. Maximus handles the department’s communications with Medicaid recipients.

Medicaid 77

Medicaid Medicaid HIPAA Health Insurance 77

AIHC

FEBRUARY 7, 2024

This article provides a basic overview of Artificial Intelligence, Telehealth, Asynchronous Services and HIPAA privacy concerns. Medicaid policies on this issue vary from state to state. Address HIPAA and Privacy Concerns Technology considerations The telehealth platform you use should meet HIPAA requirements.

HIPAA 59

HIPAA Medicaid Medicaid Telemedicine 59

Health Law RX

JUNE 28, 2022

The Guidance is the strongest signal yet from OCR that it intends to resume imposing penalties against covered entities that do not comply with the HIPAA Rules when providing telehealth. The Guidance is meant to assist covered entities with HIPAA compliance when the Telehealth Notification (defined below) is no longer in effect.

HIPAA 52

HIPAA Compliance COVID-19 Medicaid 52

HIPAA Journal

AUGUST 14, 2023

The Colorado Department of Health Care Policy and Financing (HCPF), which oversees the state’s Medicaid program and the Child Health Plan Plus (CHP+) program, has recently confirmed that the protected health information of 4,091,794 individuals was compromised. Maximus handles the department’s communications with Medicaid recipients.

Medicaid 74

Medicaid Medicaid HIPAA Health Insurance 74

AIHC

FEBRUARY 7, 2024

This article provides a basic overview of Artificial Intelligence, Telehealth, Asynchronous Services and HIPAA privacy concerns. Medicaid policies on this issue vary from state to state. Address HIPAA and Privacy Concerns Technology considerations The telehealth platform you use should meet HIPAA requirements.

HIPAA 52

HIPAA Medicaid Medicaid Telemedicine 52

AIHC

APRIL 10, 2024

HITECH is a critical aspect of the Health Insurance Portability & Accountability Act (HIPAA). Since 2009, HITECH has given “teeth” to HIPAA law. What’s the difference between HIPAA and HITECH? HIPAA guarantees patients access to their paper medical records. Understanding HIPAA is crucial.

Compliance 99

Compliance US Department of Health and Human Services HIPAA Electronic Medical Records 99

HIPAA Journal

JANUARY 31, 2024

In the paper, the HHS indicated it will be adopting a carrot-and-stick approach by developing voluntary Healthcare and Public Health (HPH) Sector Cybersecurity Goals (CPGs) that consist of cybersecurity measures that will have the greatest impact on security along with an update to the HIPAA Security Rule to add new cybersecurity requirements.

Ransomware 123

Ransomware HIPAA Hospitals Compliance 123

HIPAA Journal

JULY 28, 2023

The HHS’ Centers for Medicare and Medicaid Services (CMS) is being urged not to implement the proposed standards for prior authorization attachments, as detailed in its December 2022 Notice of Proposed Rulemaking (NPR). As such, the AHA, AMA, and BCBSA strongly advise against the adoption of the standards for prior authorization attachments.

HIPAA 85

HIPAA Health Insurance Medicaid Medicaid 85

Bill of Health

OCTOBER 27, 2023

The HIPAA Problem The privatization of next-generation medical technologies, especially in regenerative and precision medicine, further muddies the data-protection waters. In the context of health, let alone highly sophisticated cell signaling and microenvironment data, the web gets even more tangled.

HIPAA 157

HIPAA FDA Informed Consent Health Insurance 157

HIPAA Journal

OCTOBER 7, 2022

On August 5, 2022, Anthem discovered that an unauthorized individual had gained access to a database and downloaded files containing plan members’ protected health information, including names, addresses, dates of birth, phone numbers, email addresses, Medicare ID numbers, and Medicaid ID numbers.

HIPAA 100

HIPAA Health Insurance Medicaid Medicaid 100

HIPAA Journal

JUNE 16, 2023

Further information on the data breach has been covered by The HIPAA Journal here. The letters included Medicaid benefit information, although only around 200 of the 5,800 individuals affected had either their Medicare health insurance claim number (HICN) or Social Security number disclosed.

Medicaid 83

Medicaid Medicaid HIPAA Health Insurance 83

Healthcare It News

OCTOBER 4, 2022

The Electronic Healthcare Network Accreditation Commission and The CARIN Alliance have partnered to bring both the CARIN Code of Conduct and EHNAC’s criteria review process to health plans, health systems, EHR vendors and others for reporting to the Centers for Medicare & Medicaid Services on their data practices and privacy protections.

COVID-19 Vaccine 285

COVID-19 Vaccine Medicaid Medicaid COVID-19 285

Verisys

NOVEMBER 8, 2023

CMS.gov The Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) required the creation of a standard, unique health identifier for healthcare providers, which the NPI satisfies. While health plans may use other numbers internally, the NPI is mandatory for HIPAA transactions.

Fraud 97

Fraud HIPAA Medicare Medicare 97

HIPAA Journal

APRIL 4, 2023

The compromised information included the following data elements: Name, facility name, Medicaid claim ID, Medicaid client ID, care plan name, Medicaid program, gender, date of birth, admission and discharge date, medical and diagnosis information, and mental health comorbidity.

Hospitals 101

Hospitals Medicaid Medicaid HIPAA 101

HIPAA Journal

MARCH 15, 2023

The United States Department of Justice has agreed to settle alleged False Claims Act violations with Jelly Bean Communications Design LLC and manager Jeremy Spinks related to the failure to protect HIPAA-covered data. FHKC receives Medicaid funds and state funds for providing health insurance programs for children in Florida.

Health Insurance 75

Health Insurance HIPAA Due Diligence Fraud 75