How an Innocent Social Media Post Can Turn Into a HIPAA Violation

A bird is standing on top of a pile of paper.

A Texas nurse recently learned that you don’t have to identify a patient by name to violate Health Insurance Portability and Accountability Act (HIPAA) rules. According to a number of published reports, the unidentified woman, who worked as an ICU/ER  nurse, was fired from her job with Texas Children’s Hospital in Houston after posting about…

Read More

Dumpster Diver Demonstrates Importance of Proper Medical Record Storage and Disposal

A drawing of a person in the trash.

Just because a business closes its doors, it doesn’t mean that it no longer is obligated to safeguard patients’ protected health information (PHI), as one company recently learned. Earlier this month, the receiver appointed to liquidate the assets of Filefax, Inc. agreed to pay $100,000 out of the receivership estate to settle potential HIPAA violations.…

Read More

HHS Offers New HIPAA Guidance in Light of Opioid Crisis

A pile of pills with the word privacy on top.

Shortly after President Donald Trump declared a nationwide public health emergency to combat the opioid crisis, the HHS Office for Civil Rights released new guidance on when and how healthcare providers can share a patient’s health information when that patient may be in crisis and incapacitated, such as during an opioid overdose. HIPAA regulations already…

Read More

OCR Provides Update on HIPAA Enforcement Efforts

A computer monitor with the words hipaa privacy written on it.

The recent WannaCry ransomware attack impacting hospital and healthcare information systems worldwide shone a bright light on the vulnerabilities of most healthcare provider’s networks. But the problem extends far beyond this one case. In fact, there are near daily reports of patients’ private information being accessed due to a lack of appropriate security measures. And,…

Read More

Why You Need a HIPAA-Compliant Business Associate Agreement

A man and woman shaking hands over a table.

The recent announcement by The Department of Health and Human Services’ Office for Civil Rights (OCR) that it agreed to settle potential violations of the Health Insurance Portability and Accountability Act (HIPAA) with The Center for Children’s Digestive Health (CCDH) should serve as a lesson to other healthcare organizations about the need to obtain signed,…

Read More

HIPAA Data Breach Deadline Fast Approaching

A magnifying glass over the word deadline.

Last week, we wrote about the increasing number of healthcare-related data breaches and how important it is for providers to find better ways to protect their patients’ personal healthcare information. In just a few days – on March 1 – HIPAA-covered entities must submit reports of certain breaches of unsecured protected health information affecting fewer…

Read More