HHS/OCR guidance on HIPAA regulations
In this final article in our 3-part series on ransomware in healthcare, we discuss current trends and, more importantly, how companies of all sizes can protect themselves and the PHI they hold from this growing threat. One trend relates to how criminals are targeting their victims. Depending on how secure the target is, it may […]
The Rise of Ransomware in Healthcare (Part 3 of 3) Read More »
In this second installment of the series, we discuss the impact of ransomware specifically on the healthcare industry. In the 15th annual Ponemon Institute “Cost of a Data Breach Report” published by IBM Security earlier this year, hundreds of breached companies and thousands of individuals were interviewed across 17 different industries and 17 countries/regions. For
The Rise of Ransomware in Healthcare (Part 2 of 3) Read More »
This is the first in a series of articles about the rise of ransomware in the healthcare industry. This first part deals with how and why ransomware has become so prevalent. The second part explains the reasons why ransomware attacks are so prevalent in the healthcare industry, in particular. The third part discusses some of
The Rise of Ransomware in Healthcare (Part 1 of 3) Read More »
Right of access of individuals to PHI is another regulation under HIPAA that has not gotten a lot of attention until this year. Under 45 CFR § 164.524, “an individual has a right of access to inspect and obtain a copy of protected health information about the individual.” Earlier this week, OCR announced its first
Right of Access HIPAA Violations Read More »
Whether you are audited randomly or as a result of a breach or a complaint, you will be asked to provide evidence of past security/risk assessments and plans/actions for remediating any deficiencies identified in these assessments. This company’s failure to conduct risk assessments was a key factor in the settlement agreement reached with the Office
Annual Security/Risk Assessments Critical to HIPAA Compliance Read More »
Think that breaches are rare or are private? Think again. Section 13402(e)(4) of the HITECH Act requires the Secretary of the Department of Health and Human Services (DHHS) Office for Civil Rights (OCR) to post a list of breaches of unsecured protected health information (PHI) affecting 500 individuals or more. There are currently over 400
