The Most Common HIPAA Violations You Should Avoid
The most common HIPAA violations that have resulted in financial penalties are: Snooping on Healthcare Records Failure to Perform an Organization-Wide Risk Analysis Failure to Manage Security Risks /...
View ArticleHIPAA Enforcement by State Attorneys General
The Department of Health and Human Services’ Office for Civil Rights is the main enforcer of HIPAA compliance; however, state Attorneys General also play a role in enforcing compliance with the Rules...
View ArticleApril 2023 Healthcare Data Breach Report
There was a 17.5% month-over-month fall in the number of reported healthcare data breaches with 52 breaches of 500 or more records reported to the HHS’ Office for Civil Rights (OCR) – less than the...
View ArticleAHA Urges OCR To Reconsider its Guidance on Tracking Technologies
The American Hospital Association (AHA) has urged the HHS’ Office for Civil Rights to rethink its guidance on online tracking technologies and to stop considering an IP address as a unique identifier...
View ArticleSenators Demand Answers from Google About Sensitive Location Data Deletion...
A group of 10 Senators has written to Google demanding answers about its policies for deleting sensitive location data, such as visits to abortion clinics, fertility centers, domestic violence...
View ArticleArizona Man Sentenced to 54 Months in Criminal HIPAA Violation Case
An Arizona man has been sentenced to 54 months in jail for aggravated identity theft and criminal violations of the Health Insurance Portability and Accountability Act (HIPAA). Rico Prunty, 41 years...
View ArticleFlorida Bans Offshore Storage of Electronic Health Records
In May 2023, the Florida Legislature passed an update to the Florida Electronic Health Records Exchange Act that prohibits healthcare providers that use certified health record technologies from...
View Article$30,000 Penalty for Disclosing PHI Online in Response to Negative Reviews
The Department of Health and Human Services’ Office for Civil Rights (OCR) has agreed to settle a HIPAA violation case with a New Jersey provider of adult and child psychiatric services for $30,000. In...
View ArticleFTC Files Amended Complaint Against Kochava for Selling Geolocation Data
In August last year, the Federal Trade Commission (FTC) took legal action against the mobile data broker Kochava alleging the Idaho company had violated consumer privacy and put consumers at risk by...
View ArticleIs WhatsApp HIPAA Compliant?
This article answers the question is WhatsApp HIPAA compliant by discussing what the messaging platform can be used for, what it should not be used for, and when an exception can exist. WhatsApp is...
View ArticleHIPAA Social Media Rules
There are no specific HIPAA social media rules because HIPAA was enacted several years before social media networks such as Facebook and Instagram existed. However, organizations subject to HIPAA – and...
View ArticleHow to Become HIPAA Compliant
HIPAA rules and regulations can be very confusing for healthcare professionals tasked with ensuring HIPAA compliance at their organization. With that in mind, we have compiled this simple guide, which...
View ArticleKaiser Permanente Fined $450,000 for CMIA Violations Due to Mailing Error
Kaiser Permanente has been fined $450,000 by the California Department of Managed Care (CDMC) for impermissibly disclosing the confidential and protected health information (PHI) of up to 167,095...
View Article24 State Attorneys General Confirm Support for Stronger HIPAA Protections for...
A coalition of 24 state attorneys general has written to the Department of Health and Human Services (HHS) to confirm their support for the proposed update to the Health Insurance Portability and...
View ArticleMay 2023 Healthcare Data Breach Report
May 2023 was a particularly bad month for healthcare data breaches. 75 data breaches of 500 or more healthcare records were reported to the HHS’ Office for Civil Rights (OCR) in May. May – along with...
View ArticleFTC Fines Genetic Testing Company for Data Privacy and Security Failures
A San Francisco-based company that sells DNA test kits and personalized diet and exercise plans based on genetic testing has been fined $75,000 by the Federal Trade Commission (FTC) and ordered to make...
View ArticleSenators Demand Answers on Amazon Clinic’s Uses of Customer Data
Two Democratic senators have demanded answers from Amazon about how it uses the data of customers of Amazon Clinic after an investigation by the Washington Post revealed individuals wishing to enroll...
View ArticleNevada Consumer Health Data Bill Signed into Law
The governor of Nevada recently signed a new consumer health data privacy bill into law that strengthens consumer health data privacy and gives Nevada residents new rights over their health data....
View ArticleHIPAA Business Associate Fined $75,000 for Maintaining ePHI on an Unsecured...
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has agreed to settle potential HIPAA violations with the HIPAA business associate, iHealth Solutions, LLC, for $75,000....
View Article