This is a guest post from C. Patrick Felicetta. Patrick is the Entegration, Inc. Chief Operating Officer (COO). He gives some good insight into some of the advantages of Microsoft’s cloud based Office 365 service. For the past 13 years Entegration, Inc., a computer networking company, has specialized in meeting the IT needs of healthcare...
The Office of the National Coordinator for Health Information Technology (ONC) has released a very good video that explains the push towards Electronic Health Records (EHR). The video is aimed at patients so they understand Health IT and the push to upgrade technology. From the ONC website: Health Information Technology, or Health IT for short,...
Make HIPAA easy When we started to build the HIPAA Secure Now! service, we had 2 goals. Those goals were to help clients with protecting patient information and to “make HIPAA easy”. We realize most organizations hate HIPAA. We thought if we could build a service with the following characteristics, clients may not love HIPAA...
The Federal government is not being shy or covert about the increase in HIPAA enforcement that is about to occur. Covered Entities (Physician Practices and Hospitals) as well as Business Associates (Contractors and Subcontractors of Covered Entities) should have no doubt that compliance with HIPAA is no longer an optional activity. There is no way...
As we mentioned here and here, the HIPAA Omnibus Rule has a significant impact on HIPAA Business Associates. There is some debate over exactly who is a Business Associate regarding Cloud Providers. One thing that seems clear is, if you are storing protected health information (PHI) unencrypted at a Cloud Provider, the Cloud Provider most...
In a previous blog we discussed the new HIPAA Omnibus regulations as they related to Business Associates (BA). Let’s take a look at the HIPAA Omnibus regulations for Business Associates as they relate to Covered Entities (CE). Business Associates Agreements CEs have been required to have Business Associate Agreements (BAAs) with BAs for quite a...
When people think of the HIPAA Security Rule many think about protecting the privacy / confidentiality of patient information. Privacy is a major part of HIPAA security but also ensuring the availability of patient information is equally important. Let’s take a look at the HIPAA Security General Rules: § 164.306 Security standards: General rules. (a)...
OCR released the details of the HIPAA audit protocol. There aren’t a lot of surprises in their list of items they look for during an audit. The protocol looks like a summary of the HIPAA Privacy and Security Rules with the addition of the Breach Notification Rule. There are 77 items for HIPAA Security and...
You have been driving 45 mph on the same 25 mph road for years. There are never any police on the road and there is really no reason to drive 25 mph. Then after years of ignoring the posted speed limit, one day a police officer is waiting behind a tree and pulls you over...
There is a good article over at the Vormetric Security Blog that looks at restricting employee access to patient information. They argue that not all employees need full access and unless an employee can demonstrate that access is needed to perform their job function, no access to patient data should be given. The below paragraph...
© 2026 · HIPAA Secure Now!
Recent Comments