Blog Posts: HIPAA Covered Entity

Compliance Helper Blog

HIPAA HITECH Data Breach: $1000 Per Patient?

 With the new class action suit against UCLA for a HIPAA HITECH data breach it seems that the standard has been set at $1,000 per patient.  Yet Another Class-Action Filed After Breaches of Patient Data

http://www.legalhie.com/lawsuits/yet-another-class-action-filed-for-breaches-of-patient-data/

Continue reading…

Law Firms Advising CEs to Monitor BAs for HIPAA HITECH Compliance

HIPAA:Stanford Hospital Data Security Breach May Trigger More Active Monitoring Of Business Associates By Covered Entities,  By Robert Belfort and Emily Lee, Manatt, Phelps & Phillips, LLP , Health Lawyers Weekly, October 7, 2011, Vol. IX, Issue 39

Continue reading…

BA Tracker (tm) Keep BAs HIPAA HITECH Compliant

Compliance Helper is pleased to announce a new service called BA Tracker(tm) that helps a CE track the current compliance level of all of their BAs and display it through the Compliance Meter (tm).  This is a free service to the CE.  If the BAs are not compliant Compliance Helper can help them set up a comprehensive privacy and information security program including customized policies, procedures, and forms.  They are supported by a privacy and security expert we call a Helper.

Continue reading…

HIPAA HITECH For Smarties: Free Webinars For Business Associates and Covered Entities

Continuing the series of Webinars presented by Compliance Helper and Rebecca Herold & Associates, June 22 is for Business Associates and June 29th is for Small Covered Entities.  The emphasis is on how cloud computing can enhance compliance by delivering the equivalent of on-site consulting for a fraction of the cost.

Continue reading…

HIPAA Risk Assessment Minus Remediation Equals Willful Neglect

If you do a risk assessment and do not remediate the risks identified, you have achieved a state of willful neglect, which subjects you to the highest penalties under the HITECH Act.

Continue reading…

After The HIPAA HITECH Breach: Another True Story

A 60 Minutes story about PHI left on a leased copier revealed a breach by Affinity Health Plan in New York.  Here is their report on the aftermath. http://www.hcca-info.org/regional/2011/NYC/Cullencolor.pdf

Continue reading…

HIPAA HITECH Breach By Small Physician Practice: Actual Experience

A HIPAA HITECH breach caused by an office burglary resulted in a letter from OCR demanding a large amount of information in a very short time frame. We will show you actual quotes from the letter that are as scary as an IRS audit letter

Continue reading…

Managing HIPAA HITECH Compliance of Your Business Associates

How should a Covered Entity manage their Business Associates?  HIPAA requires "satisfactory assurances" that business associates are compliant (§ 164.308 ).  Under NIST guidelines for HIPAA Security Rule Compliance, Covered Entities "May consider asking the business associate to conduct a risk assessment that addresses administrative, technical, and physical risks, if reasonable and appropriate." (NIST 800-66, rev 1, p48) 

A Free Webinar on May 11 at 8:00 am PDT will demonstrate a unique method that is "reasonable and appropriate".  https://www1.gotomeeting.com/register/226455856

Continue reading…

HIPAA HITECH for Smarties: Large Covered Entities A Free Webinar

This free webinarwill show how to manage a comprehensive privacy and information security program for a large covered entity, cost effectively and efficiently.  The Master Program uses a cloud computing model to deliver the effect of an on-site consultant at a fraction of the cost.  The Compliance Meter (tm) allows a central office to monitor hundreds of business units remotely.  Register here:

https://www1.gotomeeting.com/register/574216433

Continue reading…

HIPAA HITECH Compliance for Smarties: A Series of Webinars

You are not a dummy but HIPAA HITECH compliance has created some new challenges.  How to get compliant, how to stay compliant, how to prove compliance, how to get "satisfactory assurances" that your business partners are compliant?  These are all subjects that will be addressed in a series of "How To" webinars.  The first group will be on April 13, 20, 27, and May 4th at 8:00 AM PDT.  Go to www.compliancehelper.com for registration information.

Continue reading…