Manage

HIPAA Health Insurance Portability and Accountability Act

• Anthem data breach settlement points to larger data access

  An expert says the biggest lesson to take away from Anthem healthcare's $16 million HIPAA settlement is the need to control who has access to internal systems and patient data. Continue Reading

• Opioid crisis solutions include analytics, EHR integration

  Health IT stands ready to help battle opioid deaths through greater use of data analytics and improved integration of EHRs and prescription drug databases. Continue Reading

• Cloud for healthcare presses on but is slowed by HIPAA anxiety

  Facing mounting pressure to take steps toward the healthcare cloud, hospital systems find themselves balancing modern infrastructure trends with HIPAA safeguards. Continue Reading

• To get secure cloud storage in healthcare, gauge risks first

  Conducting a risk assessment before moving to the cloud and establishing security controls when you get there are key steps toward achieving cloud security, experts say. Continue Reading

• Don't overlook HIPAA issues when developing AI healthcare tools

  So you have an idea for using AI in healthcare software? Be sure you adhere to HIPAA rules, suggests a healthcare regulatory expert, to avoid noncompliance problems. Continue Reading

• HIPAA compliance not guaranteed with ePHI security

  Medical facilities sometimes believe security is equivalent to compliance with HIPAA -- but not so fast. Organizations must consider other aspects when guarding patient data.Continue Reading

• HIPAA requirements steer data protection in healthcare

  Although HIPAA may not specify how to protect patient data in the event a system goes down, its requirements make it clear data must remain available and secure.Continue Reading

• Achieve HIPAA compliance while keeping data secure

  It's not easy balancing patient data security steps with privacy requirements from HIPAA. For starters, getting through to busy clinicians may be a tough task for IT professionals.Continue Reading

• Healthcare cybersecurity must complement HIPAA compliance

  The biggest threat to healthcare data security is often unauthorized access by staff. Behavior tracking can detect snooping by employees and identify users who have been hacked.Continue Reading

• Learn how to detect cyberattacks and prevent them

  Cyberattacks have become an all-too-common occurrence. Health IT experts offer advice on how to detect, prevent and recover from cyberattacks using the most effective technologies.Continue Reading

• For HIPAA-compliant cloud storage, weigh risks and set recovery steps

  Healthcare organizations and the cloud storage providers they work with must conduct risk assessments to confirm that all parties are safeguarding patient data as part of HIPAA-compliant cloud storage.

  Cloud companies that handle protected ...Continue Reading

• To defend endpoint security in healthcare, technology teams with training

  At many hospitals and physician practices, endpoint devices -- such as desktop computers, laptops and smartphones -- can become areas for cybercriminals to exploit. However, a combination of high-tech defense and old-fashioned common sense offer ...Continue Reading

• How to meet HIPAA compliance requirements with personal cloud storage

  Cloud storage options are popular among end users, but data protection concerns may hinder their acceptance in healthcare. Follow these best practices to secure data in the cloud.Continue Reading

• HIPAA violation examples: The five most common mistakes

  HIPAA violation examples make headlines every now and then, often with a hefty fine. The Office of Civil Rights laid out the five most common mistakes healthcare organizations make.Continue Reading

• Security app helps hospital pass CMS risk assessment, HIPAA audit

  When faced with a CMS risk assessment and HIPAA audit, Beaufort Memorial Hospital turned to Iatric Systems' Security Audit Manager to help it pass.Continue Reading

• Two pros offer HIPAA compliance plan advice for app developers

  App developers working on mHealth apps may be bound by HIPAA. Two experts share their advice on how to build a robust HIPAA compliance plan.Continue Reading

• How to prevent healthcare cybersecurity vulnerabilities via USB

  USBs can create a vulnerable entry point for cyberattacks in healthcare. One CIO details the nuances of the problem and offers up possible solutions.Continue Reading

• How to keep cloud services compliant with HIPAA standards

  As more healthcare providers send aspects of their business into the cloud, they must be aware that such a move doesn't free them from their HIPAA compliance duties.Continue Reading

• Managing and securing all parts of healthcare mobility

  Healthcare mobility, the practice of supporting different mobile devices and operating systems, is appealing to physicians, but difficult for IT departments to protect.Continue Reading

• Analyzing the expansion of healthcare desktop virtualization

  The existence of desktop virtualization in healthcare settings is becoming more common because IT departments must keep up with technologically advanced physicians and devices.Continue Reading

• Common failures of responding to security breaches in healthcare

  Attackers that cause healthcare data breaches can sometimes access the breached systems later on. Health IT departments should factor delayed hacks into their recovery plans.Continue Reading

• Best Practices for Secure Texting in Healthcare

  As healthcare providers and vendors seek information about how to safeguard personal health information (PHI), texting is one area that without question carries a great deal of risk. It's convenient, but unsecured texting of PHI opens healthcare ...Continue Reading

• Ask the expert: HIPAA breaches and the tech most likely to cause them

  It's safe to say HIPAA breaches should be avoided at all costs. One CISO discusses the technology most likely to cause a breach and what to do to ensure compliance.Continue Reading

• Ask the expert: Encryption is key for a HIPAA covered entity

  David Reis, CISO at Lahey Hospital & Medical Center, discusses important steps a healthcare organization, as a HIPAA covered entity, should take to remain compliant.Continue Reading

• What executives must know about data breaches in healthcare

  The U.S. Department of Health and Human Services Office for Civil Rights' investigations into healthcare data breaches produced information that can help stop future leaks.Continue Reading

• Protect PHI security, health data privacy; prep for audits

  Experts said that insider threats to health data privacy and PHI security are common, and providers should prep for HIPAA audits by OCR and other federal agencies.Continue Reading

• HealthPartners uses document generation tool to streamline health insurance notification

  Faced with sending out 1,200 paper-based health insurance notifications each month, HealthPartners needed a document generation tool to streamline the process.Continue Reading

• Guide to healthcare compliance resources and agencies

  There are a handful of groups that function as healthcare compliance resources and regulate rules and programs such as HIPAA and meaningful use.Continue Reading

• Office of Civil Rights goes ahead with HIPAA audits

  The security of their business associates must be factored into a healthcare provider's preparations ahead of a possible HIPAA audit.Continue Reading

• Poor execution of IT in healthcare endangers physician independence

  Two independent physicians in North Carolina experienced IT failures so severe that they reconsidered their solo status.Continue Reading

• As HIPAA audits approach, small practices remain unprepared

  In 2015, the U.S. Department of Health and Human Services' Office for Civil Rights will launch its first formal round of HIPAA audits. They will hit around 400 healthcare providers. Are they ready? Will they show compliance? What happens if they ...Continue Reading

• Health IT providers occupied with updated HIPAA rules

  Healthcare providers' resources are dedicated to meeting health IT regulations, leaving them to fit in projects such as VNAs when they can.Continue Reading

• Health IT data market sees a push for VNA systems adoption

  It's been a few years since the HITECH Act and the Affordable Care Act were signed into law, which forced healthcare organizations to begin revitalizing, revamping and securing their health IT data systems. After such a length of time, you'd think ...Continue Reading

• Talking Epic Systems, Ebola and ICD-10 at AHIMA

  Don Fluckinger and Shaun Sutner analyze the week's stories in health IT, discussing Epic Systems, Ebola, health data governance, interoperability.Continue Reading

• Ransomware program fuels health data extortionists

  A harmful new hacker tool, ransomware, haunts healthcare CIOs. Learn what providers need to do to shore up health data security and HIPAA compliance.Continue Reading

• How can IT avoid the security threats attacking mobile health devices?

  More clinicians are using mobile devices for work, challenging healthcare IT departments to protect these devices without limiting user access.Continue Reading

• Security gets interactive with HIPAA compliance assessment app

  The release of a security risk assessment tool to assist providers with HIPAA compliance was announced by the Department of Health and Human Services.Continue Reading

• Smartphones can't displace the communications badge in healthcare

  Communications badge vendors find their products fill a crucial need in healthcare, as Vocera remakes itself as a device-independent platform.Continue Reading

• Five common cloud myths preventing healthcare deployment

  Separating fact and fiction when it comes to the cloud isn't a one-step process. Here are a few tips that can help you avoid popular cloud myths.Continue Reading

• Expand the hospital wireless infrastructure, maintain HIPAA compliance

  Advice from Henry Ford Health System, which grew its hospital wireless infrastructure for BYOD while maintaining HIPAA-compliant security.Continue Reading

• ONC's six ways to avoid surprises during an unannounced HIPAA audit

  From HIMSS 2014, ONC Chief Privacy Officer Joy Pritts offers survival strategies for new HIPAA audits under the omnibus rule.Continue Reading