Upcoming Changes to HIPAA Not Set in Stone

Total Medical Compliance Newsletter February 2021 picture

Last month HHS released a set of proposed upcoming changes to the HIPAA Privacy Rule. Anyone can review and submit comments about the proposed changes until March 22, 2021. After that, HHS will review all comments and make any changes they feel are necessary and issue a final rule that will require compliance. This can […]

HIPAA: WHEN A MINOR BECOMES AN ADULT

When a minor becomes an adult, they become the owner of their medical record.  Here are a couple of things to consider: When does a minor become an adult; What does the practice need to do to ensure proper handling of the record according to HIPAA. A minor can become an adult in several ways. […]

21st Century Cures Act and Patient Data

patient access to health information

In March, the HHS Office of the National Coordinator for Health Information Technology (ONC) issued new rules to prevent health care providers, developers of certified health IT, and others in the healthcare industry from engaging in activities that block a patient’s access to their electronic health information. Building on the 21st Century Cures Act, these […]

A Simple Inventory List Can Reduce Risk

inventory list

Keeping track of your equipment, office furniture, and similar items for financial purposes is a routine part of business. It is tough to protect something if you do not know where it is or that it even exists. That is why making an inventory list of devices and software your office owns and uses, particularly […]

Social Engineering and Cyberattacks

avoid scams infographic

Pretending to be someone else over the phone was a lot easier before caller-ID was invented. People took advantage of it in fun ways (like making prank phone calls after school), and others did in inappropriate and illegal ways. After caller-ID became a standard feature, as with most technologies, ways to bypass or disable it […]

HIPAA Audit Logs – Not as Scary as You Think

man signing pictures HIPAA

HIPAA requires regular monitoring and review of user logins and activity in software and on networks.  These reports are generally referred to as audit logs. They can help identify system performance issues as well as security incidents and breaches. You might think of them as a very detailed internet browser history report. All machines, networks, […]

COVID-19 Puts Telehealth and Security in the Spotlight

coronavirus-virus

The Office for Civil Rights (OCR) announced that it is relaxing enforcement on the use of certain telehealth solutions during the COVID-19 response in order to protect patients and providers from unnecessary exposure. Using telehealth during a public health emergency enables healthcare professionals to continue to provide routine care for patients like medication checks and […]

COVID-19 Privacy Challenges

TMC keeping you updated on COVID-19

In times of crisis, processing the influx of information can be like drinking water from a firehose. It can be difficult to just take what you need and keep moving especially when important information is about topics on which you may not feel well oriented. But despite the emergency, it’s critical that your practice protects […]

ALERT – OCR INVESTIGATOR IMPOSTER

The Office for Civil Rights (OCR) in the US Department of Health and Human Services issued an alert on Friday, April 3, 2020, regarding an individual who has been contacting HIPAA covered entities posing as an OCR investigator in an attempt to obtain protected health information. The imposter does not provide an OCR compliant transaction […]

Cybersecurity & COVID-19

cybersecurity

Cybercriminals are gaining access to home and small business routers and redirecting victims to fake COVID-19 themed websites that install malware. A commonly faked website is the World Health Organization’s website. When the victim is redirected, they are instructed to download an application that offers the latest updates on COVID-19, which is actually malware. This […]