Are you a “non-Exchange entity” with respect to the healthcare exchanges coming later this year? If so you may become subject to a one-hour breach notification mandate.
Continue Reading One Hour Breach Notification Mandate Proposed Regarding Obamacare Health Exchanges

University’s $400,000 payment to HHS to settle HIPAA compliance allegations highlights critical role of risk assessments, and need for security policies and procedures.
Continue Reading Idaho State University Investigated by HHS Following Report of Data Breach

Health care practices and businesses generally need to be more careful when responding to requests for medical and other sensitive personal information.
Continue Reading We have to disclose patient records in response to a subpoena/attorney letter, right?

Will NY’s highest court allow patients to sue medical practices for fiduciary duty breaches when their non-physician employees disclose confidential medical records?
Continue Reading New York’s Highest Court To Say Whether Medical Practice Can Be Sued For Wrongful Texts By Non-Physician Employee