Help Me With HIPAA

Description A discussion of the findings in the recently released study concerning healthcare breaches in 2014.   Glossary A managed service provider (MSP) is a third-party contractor that is under contract (usually a monthly fee) to provide on-going technology support to other organizations. Links Fourth Annual Benchmark Study on Patient Privacy and Data Security Criminal Attacks: The New Leading...

ONC recently published an updated guide for Privacy and Security of Electronic Health Information.  This episode David and Donna discuss what that guide calls the Seven-Step Approach for Implementing a Security Management Process. Links Guide to Privacy and Security of Electronic Health Information FindHealthcareIT HIPAAforMSPS.com Kardon Compliance Notes The 7 Steps Step 1: Lead Your Culture , Se...

  We finish up our discussion about some common myths (or points of confusion) surrounding HIPAA compliance requirements.  Glossary Myth  is a widely held but false belief or idea.  Links  HealthIT.gov Top 10 Myths of Security Risk Analysis HealthIT.gov Guide to Privacy and Security of Electronic Health Information Analysis Notes  1 - 7 of 10 Covered in two previous episodes. HIPAA covers all PHI...

  We continue our discussion about some common myths (or points of confusion) surrounding HIPAA compliance requirements.  Glossary Myth  is a widely held but false belief or idea.  Links  HealthIT.gov Top 10 Myths of Security Risk Analysis HealthIT.gov Guide to Privacy and Security of Electronic Health Information Analysis Notes  1-3 In previous episode   Communicating with patients via email, fax...

  we discuss some common myths (or points of confusion) surrounding HIPAA compliance requirements. Glossary Myth is a widely held but false belief or idea. Links HealthIT.gov Top 10 Myths of Security Risk Analysis HealthIT.gov Guide to Privacy and Security of Electronic Health Information Analysis Notes Providers are not allowed to share information about a patient with others unless authorized by...

In this episode we discuss technology support requirements under HIPAA and why professional, HIPAA compliant IT services are an important part of managing your security compliance. The Security Rule has so many specific technical things to consider it really requires professional technology services to handle it properly.  We discuss why that is needed and what to expect from a HIPAA Compliant IT...

In this episode we discuss the importance of documentation for your HIPAA compliance program.  You can be doing everything right but without documentation there is now way for you to show anyone else that is the case.  If you can't prove it then you aren't doing it as far as OCR is concerned.  Glossary A managed service provider (MSP) is a third-party contractor that is under contract (usually a m...

In this episode we discuss how to take the first steps to building a "culture of compliance" in your organization. Every project has to start somewhere but where do you start with something as big and complicated as HIPAA? Well.... Just like the joke goes "How do you eat an elephant?" "One bite at a time." How do you break HIPAA Compliance into bite sized pieces and get your project moving? We hav...

HIPAA requires encryption in transit and lists encryption at rest as addressable.  What does all that mean?

Help Me with HIPAA does have a point and vision even if it doesn't seem like it sometimes.  Learn about your hosts and the plan for the show.

In this episode we discuss the definition of a Business Associate.  How do you find your Business Associates and what should your process for managing them include. Glossary A managed service provider (MSP)  is a third-party contractor that is under contract (usually a monthly fee) to provide on-going technology support to other organizations.   Notice of Privacy Practices (NPP) is the document CE...