What is a Limited Data Set Under HIPAA?
A limited data set under HIPAA is a set of identifiable healthcare information that the HIPAA Privacy Rule permits covered entities to share with certain entities for research purposes, public health...
View ArticleHealthcare Data Breach Statistics Questioned
Large healthcare providers experience more data breaches than smaller healthcare providers, at least that is what the healthcare data breach statistics from a spring Johns Hopkins University’s Care...
View Article2017 Data Breach Report Reveals 305% Annual Rise in Breached Records
A 2017 data breach report from Risk Based Security (RBS), a provider of real time information and risk analysis tools, has revealed there has been a 305% increase in the number of records exposed in...
View ArticleMongoDB and AWS Incorporate New Security Controls to Prevent Data Breaches
Amazon has announced that new safeguards have been incorporated into its cloud server that will make it much harder for users to misconfigure their S3 buckets and accidentally leave their data...
View ArticlePresident Trump Nominates Alex Azar for HHS Secretary
Former Deputy Secretary of the Department of Health and Human Services, Alex Azar, is tipped to take over from former Secretary Tom Price after receiving the presidential nomination for the role. Azar...
View ArticleIs Google Hangouts HIPAA Compliant?
Is Google Hangouts HIPAA compliant? Can Google Hangouts be used by healthcare professionals to transmit and receive protected health information (PHI)? Is Google Hangouts HIPAA Compliant? Healthcare...
View ArticleHow to Handle A HIPAA Privacy Complaint
Healthcare providers need to be prepared to deal with a HIPAA privacy complaint from a patient. In order for an efficient response to be conducted, policies should be developed covering the complaints...
View ArticleIn What Year Was HIPAA Passed into Legislature?
The Health Insurance Portability and Accountability Act or HIPAA was passed into legislature on August 21, 1996, when Bill Clinton added his signature to the bill. Initially, the purpose of HIPAA was...
View ArticleOctober 2017 Healthcare Data Breaches
In October 2017, there were 27 healthcare data breaches reported to the Department of Health and Human Services’ Office for Civil Rights. Those data breaches resulted in the theft/exposure of 71,377...
View ArticleSuspected Phishing Attack on UPMC Susquehanna Exposes 1,200 Patients’ PHI
UPMC Susquehanna, a network of hospitals and medical centers in Williamsport, Wellsboro, and Muncy in Pennsylvania, has announced that the protected health information of 1,200 patients has potentially...
View ArticleNovember Healthcare Breach Barometer Report Highlights Seriousness of Insider...
Protenus has released its November 2017 healthcare Breach Barometer Report. After a particularly bad September, healthcare data breach incidents fell to more typical levels, with 37 breaches tracked in...
View Article9,500 Patients Impacted by Medical College of Wisconsin Phishing Attack
A Medical College of Wisconsin phishing attack has resulted in the exposure of approximately 9,500 patients’ protected health information. The attackers managed to gain access to several employees’...
View ArticleHIPAA Compliance for Community Health Centers
There is an argument there should be a different level of HIPAA compliance for community health centers, due to community health centers having fewer resources available to them than other Covered...
View ArticleHIPAA Compliance for HR Departments
Businesses not directly involved in the healthcare or healthcare insurance industries should none-the-less pay close attention to HIPAA compliance for HR departments. It has been estimated a third of...
View ArticleHIPAA Compliance for Self-Insured Group Health Plans
HIPAA compliance for self-insured group health plans – or self-administered health group plans – is one of the most complicated areas of HIPAA legislation. The Administrative Simplification Rule of the...
View ArticleCottage Health Fined $2 Million By California Attorney General’s Office
Santa Barbara-based Cottage Health has agreed to settle a data breach case with the California attorney general’s office. Cottage Health will pay $2 million to resolve multiple violations of state and...
View ArticleExploitable IV Infusion Pump and Digital Smart Pen Vulnerabilities Uncovered
New vulnerabilities that threatens the confidentiality, integrity, and availability of ePHI have been discovered by Spirent SecurityLabs researcher Saurabh Harit. The vulnerabilities exist in certain...
View ArticleDoes HIPAA Apply to Employers?
The question “Does HIPAA Apply to Employers” is one that has provoked many different responses due to the complicated nature of the HIPAA Privacy Rule. The HIPAA Privacy Rule is one of the most...
View Article18,500 Patients PHI Exposed After Multiple Email Accounts Were Compromised
The Detroit-based Henry Ford Health System has started notifying almost 18,500 patients that some of their protected health information has potentially been accessed by an unauthorized individual. The...
View ArticleHow to Make Your Email HIPAA Compliant
Many healthcare organizations would like to be able to send protected health information via email, but how do you make your email HIPAA compliant? What must be done before electronic PHI (ePHI) can be...
View Article