Web-Tones

Another One Bites the Dust!

Another day another CE gets whacked for millions for a preventable breach. Further, if you read between the lines the CE likely got whacked for willful neglect as well because it appears to be missing basic policies and procedures. What's the excuse here? Hubris! Surely an organization of this size should have had the basics in place. Either the C-Suite was OK with thumbing its nose at the law or the compliance officer was grossly negligent. Agreeing to pay $3.5M is no small change in addition to whatever the organization had to spend on breach notification, which was likely a lot more.

Business Associate Agreements & Risk Assessments

I seriously doubt that North Memorial Health Care of Minnesota was "guilty" of just these two violations post its breach, rather these are two that OCR happened to focus on to justify the $1.55M settlement.

If you read the CAP you will see additional action items that North Memorial must complete in order to comply.

HIPAA Survival Guide Newsletter March 2016

Our article this month is entitled: Revisiting BYOD & Security of Mobile Devices.

It has been about three years since we last wrote about BYOD. During that time all of our predictions have certainly come true and then some. Further, there have been no shortage of lost or stolen devices to confirm our hypothesis that BYOD would wreak havoc in the healthcare workplace (i.e. vis-a-vis potential breaches of PHI). In this article we actually want to be more proactive regarding actually proposing a reasonable, low cost, high value add, (partial) solution to the problem. However, we understand for reasons to be discussed below that this solution is almost certainly not going to be implemented except where there exist visionary (health information technology or "HIT") leaders at the very top of organizations...

You can read the entire article here:

 Our March Webinar will be on the same topic and you can register for this FREE Webinar below.

March Webinar: Revisiting BYOD & the Security of Mobile Devices

Description: Mobile devices, including the addition of the Internet of Things, threaten to create vulnerability vectors orders of magnitude greater that what we have today.

Thursday, March 24, 2016 2:00 PM - 3:30 PM EST

Register Here For The March Webinar

Looking for a simplified way to train your staff on HIPAA Breach Notification?  For a limited time, we are offering our Breach Notification Training Module F*R*E*E* when you sign up for our monthly newsletter (also free).  Go here to get your free training now!