Image of someone signing a document online for blog about Do electronic BAAs meet HIPAA Privacy Rule requirements?

2 min read

Do electronic BAAs meet HIPAA Privacy Rule requirements?

Electronic business associate agreements (BAAs), signed with an electronic signature, are permissible under the HIPAA Privacy Rule if they meet all relevant legal and regulatory requirements.

Read More
red qr code on keyboard

2 min read

How to create a defense strategy against quishing

Quishing is a cyber threat that exploits QR codes and phishing in deceptive emails, posing risks like data breaches and malware infections. The HC3...

Read More
Image of someone typing on a computer for blog about Health data breach impacts millions due to missing password requirements

2 min read

Health data breach impacts millions

An investigation revealed that a database in the Mexican healthcare sector was left unprotected, exposing several million individuals’ sensitive...

Read More
Image of lock for blog about What are cybersecurity performance goals (CPGs)?

2 min read

What are cybersecurity performance goals (CPGs)?

Cybersecurity performance goals (CPGs) are a set of cybersecurity best practices and minimum-security standards developed by the Cybersecurity and...

Read More
Image of someone in a hoodie on a computer for blog about What is a machine-in-the-middle attack?

2 min read

What is a machine-in-the-middle attack?

Machine-in-the-middle attacks, often called "man-in-the-middle" (MitM) attacks, occur when an attacker intercepts communication between two parties...

Read More
Image of someone taking notes for blog about The role of mental health practitioners in community systems of care for children

2 min read

Mental health practitioners in community systems of care for children

Community care systems, or networks of service providers that support a child’s needs holistically, come about in various ways. These teams require...

Read More
Image of paper that says

2 min read

Are small health plans required to comply with the Privacy Rule? 

No, not all small health plans must comply with the HIPAA Privacy Rule. Specifically, an employee welfare benefit plan with fewer than 50...

Read More
doctor touching medical symbol for post What are nonroutine disclosures of PHI under HIPAA?

2 min read

What are non-routine disclosures of PHI under HIPAA?

Non-routine disclosures refer to the instances where protected health information (PHI)is shared for unique or unexpected situations. These...

Read More
digital globe with web domain space for post What are homograph domain attacks?

2 min read

What are homograph domain attacks? 

People are often lulled into a sense of security by familiar domains, leading to accessing websites and communications without much thought. Threat...

Read More
social security cards for post Is SSA a covered entity?

2 min read

Is SSA a covered entity?

No, the Social Security Administration (SSA) is not a covered entity under HIPAA. According to the Department of Health and Human Services (HHS), the...

Read More
digital business icons over a laptop screen for post Instances where the minimum necessary standard does not apply

1 min read

Instances where the minimum necessary standard does not apply

There are cases where full access to patient health is necessary, such as for diagnosis or public health purposes.The minimum necessary standard...

Read More
Image of magnifying glass and stick people for blog about OIG report uncovers potential misuse of health risk assessments, costing billions

2 min read

OIG uncovers potential misuse of health risk assessments

The Office of Inspector General (OIG) found that some Medicare Advantage (MA) companies may be using health risk assessments (HRAs) and chart reviews...

Read More
Image of someone typing for blog about Should direct care practices (DCPs) be HIPAA compliant? 

3 min read

Should direct care practices (DCPs) be HIPAA compliant? 

While not all DCPs are regulated by HIPAA, using HIPAA compliant email can help DCPs build patient trust through transparency and accountability. It...

Read More