Senate Attorney Judiciary Committee Advances South Dakota Data Breach...
The Senate Attorney Judiciary Committee in South Dakota has overwhelmingly voted in favor of introducing data breach notification legislation. The bill, introduced by the Committee on Judiciary at the...
View Article$3.5 Million Settlement to Resolve HIPAA Violations That Contributed to Five...
The first HIPAA settlement of 2018 has been announced by the Department of Health and Human Services’ Office for Civil Rights (OCR). Fresenius Medical Care North America (FMCNA) has agreed to pay OCR...
View ArticleMassachusetts Online Breach Reporting Tool Launched: Data Breaches Soon to Be...
Massachusetts Attorney General Maura Healey has announced the launch of a new online data breach reporting tool. The aim is to make it as easy as possible for breached entities to submit breach...
View ArticleHow Many HIPAA Violations in 2017 Resulted in Financial Penalties?
We are often asked about healthcare data breaches and HIPAA violations and two of the most recent questions are how many HIPAA violations in 2017 resulted in data breaches and how many HIPAA violations...
View ArticleIs Ademero HIPAA Compliant?
Ademero is a document management software (DMS) provider whose platform helps businesses keep track of large quantities of documents and transition to a paperless environment, but is Ademero HIPAA...
View ArticleHealthcare Industry Scores Poorly on Employee Security Awareness
A recent report published by security awareness training company MediaPro has revealed there is still a lack of preparedness to deal with common cyberattack scenarios and privacy and security threats...
View ArticleIs Box HIPAA Compliant?
Is Box HIPAA compliant? Can Box be used by healthcare organizations for the storage of documents containing protected health information or would doing so be a violation of HIPAA Rules? An assessment...
View Article$100,000 Settlement Shows HIPAA Obligations Don’t End When a Business Closes
HIPAA covered entities and their business associates must abide by HIPAA Rules, yet when businesses closes the HIPAA obligations do not end. The HHS’ Office for Civil Rights (OCR) has made this clear...
View ArticleIs eFileCabinet HIPAA Compliant?
eFileCabinet is a document management and storage solution for businesses that offers on-site and cloud storage, but is the service suitable for the healthcare industry? Is eFileCabinet HIPAA compliant...
View ArticleJanuary 2018 Healthcare Data Breach Report
Our January 2018 Healthcare Data Breach Report details the healthcare security incidents reported to the Department of Health and Human Services’ Office for Civil Rights in January 2018. There were 21...
View ArticleWhat Covered Entities Should Know About Cloud Computing and HIPAA Compliance
Healthcare organizations can benefit greatly from transitioning to the cloud, but it is essential to understand the requirements for cloud computing to ensure HIPAA compliance. In this post we explain...
View ArticleIs Yammer HIPAA Compliant?
Is Yammer HIPAA compliant? Does the platform incorporate all the necessary administrative and technical controls to meet HIPAA requirements? This post explores whether Yammer supports HIPAA compliance...
View ArticleAJMC Study Reveals Common Characteristics of Hospital Data Breaches
The American Journal of Managed Care has published a study of hospital data breaches in the United States. The aim of the study was to identify common characteristics of hospital data breaches, what...
View ArticleResearch Institutions Given Additional 6 Months to Comply with Updated Common...
Updates to the Common Rule – The Federal Policy for the Protection of Human Subjects – that were initially due to come into effect on January 19, 2018 have been delayed by 6 months, giving research...
View ArticleUpdated Colorado Data Breach Notification Advances: Reporting Period Cut to...
In January, a new data breach notification bill was introduced in Colorado that proposed updates to state laws to improve protections for residents affected by data breaches. The bill introduced a...
View Article1,900 UVA Patients’ PHI Accessed by Hacker Behind FruitFly Malware
Almost 1,900 patients of University of Virginia Health System are being notified that an unauthorized individual has gained access to their medical records as a result of a malware infection. The...
View ArticleIs IBM Cloud HIPAA Compliant?
Is IBM Cloud HIPAA compliant? Is the cloud platform suitable for healthcare organizations in the United States to host infrastructure, develop health applications and store files? In this post we...
View ArticleIs Google Sheets HIPAA Compliant?
Is Google Sheets HIPAA compliant? Can HIPAA-covered entities use Google Sheets to create, view, or share spreadsheets containing identifiable protected health information or would using Google Sheets...
View ArticleOPM Alleges Health Net Refused to Fully Comply with Recent Security Audit
The U.S. Office of Personnel Management (OPM) Office of the Inspector General Office of Audits (OIG) has issued a Flash Audit Alert alleging Health Net of California has refused to cooperate with a...
View ArticleMedical University of South Carolina’s Hard Line on HIPAA Violations Sees 13...
According to a recent report in the Post and Courier, the Medical University of South Carolina (MUSC) terminated 13 employees last year for violating HIPAA Rules by snooping on patient records. In...
View Article