HIPAA

Check Out Our Webinar Addressing the HIPAA, HITECH Omnibus Regulations

By Joseph J. Lazzarotti on August 15, 2013

Posted in Data Security, Featured, GINA, Health Information Technology, HIPAA, Identity Theft, Information Management, Information Risk, Written Information Security Program

Click on the link in this post for high-level compliance roadmap concerning the Omnibus Privacy Rule under HIPAA and HITECH for covered plans, providers and business associates.
Continue Reading Check Out Our Webinar Addressing the HIPAA, HITECH Omnibus Regulations

Thinking About Cyber, Data Breach Insurance? Have You Assessed Your Needs/Risks?

By Joseph J. Lazzarotti on August 7, 2013

Posted in Data Security, HIPAA, Identity Theft, Information Management, Information Risk, Written Information Security Program

It seems more companies are considering whether to purchase or enhance their cyber or data breach insurance coverage. In recent years, these offerings have expanded giving businesses more choice, and perhaps so has the need for such coverage given the explosion of access to and transmission of confidential data. What is interesting about this development is the different…

Wellpoint pays $1.7 Million to Settle Potential HIPAA Violations

By Joseph J. Lazzarotti on July 12, 2013

Posted in Data Security, Health Information Technology, HIPAA, Identity Theft, Information Management, Information Risk, Written Information Security Program

Breach involving software upgrade to online application system leads to allegations of HIPAA privacy and security failures, and a $1.7 million settlement payment to HHS.
Continue Reading Wellpoint pays $1.7 Million to Settle Potential HIPAA Violations

Hospital Employee Terminated for HIPAA Data Breach, Discrimination Defense Rejected

By Joseph J. Lazzarotti on June 21, 2013

Posted in HIPAA, Information Risk, Workplace Investigations, Written Information Security Program

Hospital employee’s discrimination claims were unsuccessful where termination resulted from HIPAA breach…
Continue Reading Hospital Employee Terminated for HIPAA Data Breach, Discrimination Defense Rejected

One Hour Breach Notification Mandate Proposed Regarding Obamacare Health Exchanges

By Joseph J. Lazzarotti on June 20, 2013

Posted in Data Security, Health Information Technology, HIPAA, Identity Theft, Information Management, Information Risk, Written Information Security Program

Are you a “non-Exchange entity” with respect to the healthcare exchanges coming later this year? If so you may become subject to a one-hour breach notification mandate.
Continue Reading One Hour Breach Notification Mandate Proposed Regarding Obamacare Health Exchanges

FDA Provides Data Security Guidance for Medical Device Manufacturers

By Joseph J. Lazzarotti on June 15, 2013

Posted in Health Information Technology, HIPAA, Information Management, Information Risk

Big Data’s impact on medical devices pushes FDA to propose draft guidelines for cybersecurity.
Continue Reading FDA Provides Data Security Guidance for Medical Device Manufacturers

Idaho State University Investigated by HHS Following Report of Data Breach

By Joseph J. Lazzarotti on May 24, 2013

Posted in Data Security, Health Information Technology, HIPAA, Information Management, Information Risk, Written Information Security Program

University’s $400,000 payment to HHS to settle HIPAA compliance allegations highlights critical role of risk assessments, and need for security policies and procedures.
Continue Reading Idaho State University Investigated by HHS Following Report of Data Breach

HIPAA Preempts Less Protective State Law Concerning Medical Records of Deceased Nursing Home Residents, Eleventh Circuit Rules

By Joseph J. Lazzarotti on April 16, 2013

Posted in HIPAA, Written Information Security Program

Federal Appeals Court address HIPAA preemption of state law.
Continue Reading HIPAA Preempts Less Protective State Law Concerning Medical Records of Deceased Nursing Home Residents, Eleventh Circuit Rules

New Tennessee Law Requires Destruction of Certain PHI Following Medical Malpractice Litigation

By Joseph J. Lazzarotti on March 31, 2013

Posted in Data Security, HIPAA, Information Risk, Written Information Security Program

New Tennessee law requires destruction of certain PHI following medical malpractice litigation…
Continue Reading New Tennessee Law Requires Destruction of Certain PHI Following Medical Malpractice Litigation

Utah Requires Statement About Disclosures in HIPAA Notice of Privacy Practices