HIPAA Final Rule: Modified Rule for Business Associates and Subcontractors
February 6, 2013. Today, we cover the business associate Administrative Safeguard (b) of the Security Rule, as modified by the...
HIPAA Final Rule: More on Breach Notification Rule Changes
Jan 31, 2013
January 31, 2013. Today, we briefly identify key changes or reminders regarding breach notification in the preamble of the Final...
BCBST Pays $1.5 Million to HHS to Settle Potential HIPAA Privacy and Security Violations
Mar 15, 2012
On March 13, 2012, Blue Cross Blue Shield of Tennessee (BCBST) agreed to a payment of $1.5 million to the...
OMB Clears HITECH Act Accounting of Disclosures NPRM
May 26, 2011
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR), responsible for enforcement of the HIPAA Privacy,...
OCR Issues Draft Guidance on Security Risk Analysis
May 12, 2010
The Office for Civil Rights (OCR) of the Department of Health and Human Services (HHS) issued on May 7, 2010,...
HIPAA ‘Protected Health Information’: What Does PHI Include?
Sep 1, 2009
HIPAA.com has received from its readers requests for information on topics related to HIPAA Administrative Simplification Privacy and Security Rules...
HHS Secretary Sebelius Delegates Oversight and Enforcement of HIPAA Security Rule to OCR
Aug 4, 2009
U.S. Health and Human Services (HHS) Secretary Kathleen Sebelius has delegated oversight and enforcement of the HIPAA Administrative Simplification Security...
Technical Safeguard Standards of the HIPAA Administrative Simplification Security Rule
Jun 1, 2009
There are five technical safeguard standards: access control, audit controls, integrity, person or entity authentication, and transmission security. Each standard...
Physical Safeguard Standard, Device and Media Controls: Data Backup and Storage Implementation Specification-What to Do and How to Do It
May 22, 2009
In our series on the HIPAA Administrative Simplification Security Rule, Device and Medial Controls is the fourth and last Physical...
Physical Safeguard Standard, Device and Media Controls: Accountability Implementation Specification-What to Do and How to Do It
May 21, 2009
In our series on the HIPAA Administrative Simplification Security Rule, Device and Medial Controls is the fourth and last Physical...