Are You Ready for HIPAA and HITECH Audits?
The Office for Civil Rights (OCR) of the U.S. Department of Health and Human Services (HHS) is launching a pilot program this month to make sure covered entities are in compliance with HIPAA privacy and security rules and breach notification standards, according to the OCR. The OCR will perform up to 150 audits to assess […]
Health Care Professionals Take Note of the New HIPAA Rules
By George F. Indest III, J.D., M.P.A., LL.M., Board Certified by The Florida Bar in Health Law, and Lance O. Leider, J.D., The Health Law Firm With the popularity of electronic health records (EHRs), social media and everything in between, the U.S. Department of Health and Human Services (HHS) has released stronger rules and protections […]
Affinity Health Plan Settles with Government in Photocopier HIPAA Breach Incident Involving Patient Medical Information
By George F. Indest III, J.D., M.P.A., LL.M., Board Certified by The Florida Bar in Health Law The U.S. Department of Health and Humans Services (HHS) Office of Civil Rights (OCR), and Affinity Health Plan, Inc. (Affinity), reached a settlement for more than $1.2 million for potential violations of the Health Insurance Portability and Accountability […]
Two Laptops Containing Information of 729,000 Patients Stolen from California Hospital Group
By George F. Indest III, J.D., M.P.A., LL.M., Board Certified by The Florida Bar in Health Law The personal health information of around 729,000 patients has been compromised following the theft of two laptops. The password-protected computers were taken from an administration building of AHMC Healthcare Inc., a hospital group in Alhambra, California. According to […]
Dermatology Practice Settles with Government After Stolen USB Drive Results in HIPAA Breach
By George F. Indest III, J.D., M.P.A., LL.M., Board Certified by The Florida Bar in Health Law The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR), and Adult & Pediatric Dermatology (APDerm), reached a $150,000 settlement for privacy and security violations of the Health Insurance Portability and Accountability Act (HIPAA). […]
Data Breach at Colorado Hospital Highlights IT Security Risks
By Lance O. Leider, J.D., The Health Law Firm A small rural hospital in Glenwood Springs, Colorado, has identified a virus on its computer network that had captured and stored screen shots of protected health information in a hidden file system. The hidden folder was created on Sept. 23, 2013, but was not discovered until […]
HIPAA Fines, Mobile Devices and Risk Assessments: Follow the Steps or Pay the Price
By Lance O. Leider, J.D., The Health Law Firm Two separate entities have agreed to pay the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) $1,975,220 in fines collectively. The settlements resolve potential violations of the Health Insurance Portability and Accountability Act (HIPAA) privacy and security rules involving stolen, unencrypted […]
Cyber Attack at Community Health Systems Affects 4.5 Million Patients-Could This be a New Trend?
By George F. Indest III, J.D., M.P.A., LL.M., Board Certified by The Florida Bar in Health Law On August 18, 2014, Community Health Systems, a Tennessee-based hospital chain that has 206 hospitals in 29 states, announced that its computer system was hacked. According to a number of news reports, an outside group of hackers, originating […]