The news on patient information breaches gets stranger every day. In an article over at Pensacola News Journal (pnj.com), 2 ex-employees are being sued for stealing patient information. Sight and Sun Eyeworks Gulf Breeze are suing a former physician and office manager for stealing patient information and trying to switch patients to the new practice...
Back in April we wrote about gang members who are getting their girlfriends hired at medical practices. The gang member’s girlfriends are stealing medical records and giving it to their boyfriends to file false tax returns. Detective Craig Catlin of the North Miami Beach Police Department Gang Unit goes so far as to call it an...
We wrote about the risks of Business Associates (BAs) to patient information. The reality is many Business Associates have no idea of the requirements of HIPAA or the real risks to patient information. And even though all Business Associates will be responsible for complying with the HIPAA Security and Omnibus rules come September that may...
Click below to watch a short video on our free HIPAA security training! Clients love our HIPAA security training! We keep hearing that their employees find the training to be valuable and some even say it is fun (or as fun as HIPAA security training can be). We keep working to make the training engaging...
You may have read the headline and said to yourself “How can my smartphone cause a data breach if I don’t have any patient information on it?” While it may be true that you do not access your EMR on your phone, you should still be concerned. Smartphones are amazing devices. They have the power...
One of the requirements of the HIPAA Security Rule is to audit access to Protected Health Information (PHI). Auditing is the recording of access to PHI. It usually includes: who accessed PHI, when was PHI accessed and what PHI was accessed? Many EHRs and all certified EHRs for Meaningful Use have the ability to audit...
The HIPAA Omnibus Final Rule brings a significant change to the HIPAA/HITECH Breach Notification Rule. Prior to the HIPAA Omnibus Rule, organizations were required to perform a risk assessment to determine if there was likely harm to a patient resulting from a privacy breach. Determining if the breach resulted in harm was referred to as...
Pilot Program Last year the Department of Health and Human Services’ Office for Civil Rights (OCR), which enforces HIPAA, conducted 115 HIPAA compliance audits. The program is being looked at as a pilot project that will eventually be used to put in place a permanent audit program. According to a HealthcareInfoSecurity interview with OCR’s Susan...
A potential client asked us on a conference call: What sets HIPAA Secure Now! apart from your competition? A lot of companies offer similar services. I thought about the question for a second before responding. The client was right. There are a lot of companies that offer similar services. I responded: What sets HIPAA Secure...
© 2026 · HIPAA Secure Now!
Recent Comments