4 min read
What is a HIPAA compliance plan?
A HIPAA compliance plan is a detailed, tailored strategy that enables healthcare organizations to respond swiftly and effectively to incidents,...
4 min read
A HIPAA compliance plan is a detailed, tailored strategy that enables healthcare organizations to respond swiftly and effectively to incidents,...
2 min read
Blood banks are generally not bound by HIPAA, but they adhere to FDA regulations, state privacy laws, and their own confidentiality policies to...
2 min read
State, county, or local health departments must comply with the HIPAA Privacy Rule if they qualify as covered entities. For example, a state Medicaid...
1 min read
Negative reviews can be a stressful situation for any medical professional. Reviews often drive psychiatrists to want to clarify or defend their...
2 min read
Electronic business associate agreements (BAAs), signed with an electronic signature, are permissible under the HIPAA Privacy Rule if they meet all...
2 min read
No, not all small health plans must comply with the HIPAA Privacy Rule. Specifically, an employee welfare benefit plan with fewer than 50...
2 min read
Non-routine disclosures refer to the instances where protected health information (PHI)is shared for unique or unexpected situations. These...
2 min read
No, the Social Security Administration (SSA) is not a covered entity under HIPAA. According to the Department of Health and Human Services (HHS), the...
1 min read
There are cases where full access to patient health is necessary, such as for diagnosis or public health purposes.The minimum necessary standard...
3 min read
While not all DCPs are regulated by HIPAA, using HIPAA compliant email can help DCPs build patient trust through transparency and accountability. It...
2 min read
While related, deidentification and limited data sets are distinct concepts under HIPAA with each serving a specific purpose in the healthcare...
2 min read
Blind Carbon Copy (BCC) is not enough for HIPAA compliant group emails. While it helps protect recipient privacy by concealing email addresses, it...
3 min read
Health data stakeholders must distinguish between the Federal Trade Commission's (FTC) Health Breach Notification Rule and the Health Insurance...