HIPAA Advice

Google Workspace is HIPAA compliant for services that have “covered functionality”, provided HIPAA-covered organizations subscribe to a Workspace Plan that...

PHI in HIPAA is an acronym for Protected Health Information – health information that is created, collected, maintained, or transmitted...

HIPAA History: Why was HIPAA Created? Our HIPAA history lesson starts on August 21, 1996, when the Healthcare Insurance Portability...

HIPAA compliance for medical centers consists of complying with the Administrative Simplification standards of the Health Insurance Portability and Accountability...

HIPAA compliance for medical software applications can be a complicated issue to understand. Some eHealth and mHealth apps are subject...

Google Chat is HIPAA compliant when it is used as part of a Google Workspace plan that includes the necessary...

HIPAA Compliance Regulations The latest version of the HIPAA compliance regulations were enacted in the Final Omnibus Rule of 2013....

The HIPAA guidelines for telemedicine start with preparing for the remote delivery of healthcare by auditing procedures, analyzing risks, training...

ChatGPT is not HIPAA compliant and cannot be used to (for example) summarize patients’ notes or compile letters to patients...

The term HIPAA Covered Entities is most often defined as health plans, healthcare clearinghouses, and healthcare providers that create, receive,...

HIPAA compliance tools are most often an online service or platform that guides covered entities and business associates through the...

The HHS OIG Exclusions List is a database of individuals and organizations that are prohibited from participating in federal health...

HIPAA compliance for pediatricians is complicated by the provisions of the Privacy Rule relating to personal representatives of unemancipated minors...

A HIPAA compliance plan starts life as a framework for using and disclosing Protected Health Information as required or permitted...

iCloud is not HIPAA compliant and cannot be used to store, sync, or share media containing Protected Health Information (PHI)...

HIPAA is an acronym for the Health Insurance Portability and Accountability Act – an Act primarily intended to reform the...

A HIPAA subpoena is a legal document that compels HIPAA-regulated entities to release information such as patient medical records that...

State privacy law supersedes HIPAA when a state law provides greater privacy protections for individually identifiable health information than HIPAA...

Dropbox is HIPAA compliant and can be used to store, sync, and share Protected Health Information provided organizations subscribe to...

HIPAA compliance for behavioral health practices not only consists of complying with the HIPAA Privacy, Security, and Breach Notification Rules,...

A HIPAA authorization is a form that must be completed by a patient or a health plan member when a...

HIPAA compliance for HR departments consists of understanding what HIPAA standards are applicable to the department and implementing policies and...

A breach of HIPAA is considered to be any acquisition, access, use, or disclosure of protected health information which compromises...

HIPAA compliance and medical records security go hand in hand because even a single medical record qualifies as a designated...

When discussing HIPAA for therapists, it is important to be aware that a therapist can be a solo Covered Entity,...

If you conduct an Internet search for HIPAA compliance solutions, you will get thousands of results. Unfortunately most HIPAA compliance...

Webex is HIPAA compliant and, provided policies relating to disclosures are complied with, can be used to disclose PHI during...

The HIPAA permitted disclosures of PHI are summarized in §164.502 of the Privacy Rule, with more details about each type...

HIPAA compliance for insurance brokers acting on behalf of a HIPAA-covered health plan consists of complying with the HIPAA Security...

HIPAA consulting firms are most often firms of compliance experts with a deep understanding of the Health Insurance Portability and...

Who you report HIPAA violations to can vary depending on whether – for example – you are a patient reporting...

HIPAA was enacted at various stages following the passage of the Health Insurance Portability and Accountability Act in 1996, with...

HIPAA training in dental offices is mandatory for all staff who come into contact with Protected Health Information (PHI), requiring...

Box is HIPAA compliant and can be used to store, manage, and share files and folders containing Protected Health Information...

PHI stands for Protected Health Information – a term is commonly referred to in connection with the Health Insurance Portability...

HIPAA compliance for SaaS consists of ensuring the software product or service complies with all applicable Security Rule standards, and...

A HIPAA compliant home office is a working environment set up to support HIPAA compliance and safeguard the privacy and...

SurveyMonkey is HIPAA compliant and – when organizations subscribe to an Enterprise Plan and agree to SurveyMonkey’s Business Associate Agreement...

There is no one-size-fits-all approach HIPAA compliance for hospitals because of the many different types of hospitals, the different types...

HIPAA compliance for optometrists is mandatory for most optometry professionals; however, the responsibility for HIPAA compliance can vary depending on...

The civil penalty for knowingly violating HIPAA falls within the range of $13,785 and $68,928 per violation depending on whether...

Is Texting in Violation of HIPAA? Texting in violation of HIPAA can be prevented by either implementing a secure messaging...

A HIPAA Covered Entity is an organization or an individual who is required to comply with applicable standards of the...

The text of the Healthcare Insurance Portability and Accountability Act is full of HIPAA exceptions – adding to the complexity...

Employees can help prevent HIPAA violations by fully understanding what PHI is, knowing when PHI can permissibly be used and...

Healthcare organizations and their business associates that want to share protected health information (PHI) in a HIPAA-compliant way must do...

Our HIPAA explained article provides information about the Health Insurance Portability and Accountability Act (HIPAA) and the Administrative Simplification Regulations...

To best explain how to secure patient information and PHI, it is necessary to distinguish between what is patient information...

HIPAA compliance for dentists consists of complying with the applicable standards of the HIPAA Administrative Simplifications Regulations, state regulations with...

A limited data set under HIPAA is a set of identifiable healthcare information that the HIPAA Privacy Rule permits covered...

HIPAA violations most often occur when covered entities, business associates, or members of either’s workforces fail to comply with the...

The HIPAA Privacy Rule is a federal floor of privacy standards that protect individual’s health information and other identifying information...

If you discover a HIPAA violation in the workplace, what you should do depends on the nature of the violation,...

The acronym HIPAA stands for Health Insurance Portability and Accountability Act of 1996 and that led to the development of...

Health, treatment, or payment information, and any identifiers maintained with this information, is considered Protected Health Information under HIPAA if...

HIPAA applies to employers in certain circumstances and, although HIPAA does not protect individually identifiable health information maintained by a...

HIPAA – via the Administrative Simplification Regulations – covers the privacy of individually identifiable health information when it is created,...

HIPAA applies to everyone as individuals inasmuch as everyone has personally identifiable health information that they have the right to...

HIPAA is important because, due to the passage of the Health Insurance Portability and Accountability Act, the Department of Health...

What happens if a nurse violates HIPAA depends on the nature of the violation, the consequences of the violation, the...

The HIPAA breach notification requirements are that HHS’ Office for Civil Rights and individuals whose unsecured Protected Health Information (PHI)...

A HIPAA violation refers to the failure to comply with HIPAA rules, which can include unauthorized access, use, or disclosure...

The information protected under HIPAA law is known as Protected Health Information – a subset of individually identifiable health information...

The HIPAA minimum necessary rule standard applies to uses and disclosures of PHI that are permitted under the HIPAA Privacy...

E-signatures can be used under HIPAA Rules provided mechanisms are put in place to ensure the authenticity of the signatory,...

All Covered Entities and Business Associates are required by 45 CFR 164.308 – the Administrative Safeguards of the HIPAA Security Rule...

The Health Information Technology for Economic and Clinical Health Act or HITECH Act is the part of the American Recovery...

There are ways you can report a HIPAA violation anonymously but, due to the risk your anonymous report may be...

Covered entities under HIPAA are individuals, institutions, or organizations that transmit protected health information electronically in transactions for which the...

Yes, a patient can sue for a HIPAA violation and there are an increasing number of class action suits for...

The HIPAA Conduit Exception Rule applies to organizations that would normally be considered business associates, but who are exempted from...

The relationship between HITECH, HIPAA, and electronic health and medical records is primarily that certain provisions of the HITECH Act...

The purpose of HIPAA was originally to ensure more employees could continue to receive health insurance coverage when they were...

The HIPAA retention requirements are that certain types of documents must be maintained for six years from the date of...

HIPAA compliance for pharmacies can include compliance with all the Administrative Simplification Regulations in addition to the Privacy, Security, and...

The HIPAA password requirements are a combination of Administrative and Technical Safeguards designed to manage and monitor access to PHI....

Protected Health Information is an individual’s health, treatment, or payment for treatment information – and any information maintained in the...

Individually identifiable health information is information relating to an individual’s past, present, or future health condition, treatment for the condition,...

How you report a HIPAA violation varies depending on the nature of the violation and whether you are a member...

Under HIPAA PHI is considered to be an individual’s health, treatment, and payment information, and any further information maintained in...

Texas HB300 is a bill passed by the Texas legislature in 2011 that updates Chapter 181 of the Texas Health...

A HIPAA violation can be grounds for termination depending on the nature of the violation, the consequences of the violation,...

Making your email HIPAA compliant has the advantage of enabling you to communicate PHI in emails with patients, colleagues, and...

Florida HIPAA laws are the laws that apply in Florida to Covered Entities and Business Associates that preempt, or are...

The relationship between psychotherapy notes and HIPAA is more complex than with most other types of health information because, under...

What you should do if accused of a HIPAA violation can depend on the nature of the violation, whether you...

You can make WordPress HIPAA compliant by installing plug-ins into a WordPress site that collect and secure Protected Health Information...

HIPAA compliant hosting is a service most often provided by cloud service providers that enables covered entities and business associates...

HIPAA compliance for home health workers consists of complying with the Privacy Rule and Security Rule in circumstances that can...

A HIPAA Notice of Privacy Practices is a document provided to patients on first contact, and to health plan members...

Any businesses subject to HIPAA are advised to use a HITECH compliance checklist to help ensure they meet the requirements...

The difficulty in complying with HIPAA California law is that there are three significant Acts of legislation that healthcare organizations...

The maximum penalty for violating HIPAA is currently $68,928 (December 2023) for a violation that is attributable to willful neglect...

A HIPAA confidentiality agreement for employees is similar to a non-disclosure agreement inasmuch as members of the workforce agree not...

HIPAA is enforced by multiple federal agencies including the Department of Health and Human Services, the Department of Labor, the...

HIPAA policies and procedures are comprehensive guidelines that healthcare organizations must implement and regularly update to ensure the confidentiality, integrity,...

Although HIPAA cannot be waived in its entirety, some provisions of the Privacy Rule can be waived in certain circumstances...

HIPAA is important for patients because it provides a federal floor of privacy and security standards for their health data,...

The HIPAA guidelines for nursing students are that nursing students should understand what HIPAA is and what it protects to...

The Texas Medical Records Privacy Act is a law passed by the Texas legislature in 2001 that created Chapter 181...

Google Drive is HIPAA compliant if it is used as part of a paid-for Google Workspace plan with the capabilities...

G Suite is HIPAA compliant provided organizations subscribe to a Google Workspace Business Account that includes the capabilities to support...

The HIPAA medical records destruction rules relate to the safeguards covered entities and business associates must implement to ensure Protected...

HIPAA compliance for hospices has to take into account that many members of the workforce may be volunteers or clergy...

The HIPAA Security Rule is a subpart of the HIPAA Privacy Rule inasmuch as the Privacy Rule applies to all...

Generally, HIPAA compliance for nurses is considered to mean adhering to policies and procedures developed by an organization’s HIPAA Privacy...

Gossip can be a HIPAA violation – potentially resulting in a sanction for the gossiper – depending on who is...

HIPAA compliant remote access software provides HIPAA-covered entities and their busines associates with a secure way of remotely accessing systems...

In its October 2023 cybersecurity newsletter, the HHS’ Office for Civil Rights reminds HIPAA-regulated entities of the importance of sanctions...

Section §164.528 of the Privacy Rule is better known as the HIPAA disclosure accounting standard which states an individual has...

HIPAA compliance for call centers that operate as business associates for covered entities consists of complying with the Security and...

Medical records can be subpoenaed because every type of record can be subpoenaed, and a more relevant question would be...

How you should respond to an accidental HIPAA violation depends on the nature of the accidental violation and the potential...

The HIPAA Technical Safeguards consist of five Security Rule standards that are designed to protect ePHI and control who has...

Google Docs is HIPAA compliant provided that, before using the service to create, receive, maintain, or transmit PHI, organizations subscribe...

HIPAA applies to schools in certain circumstances, such as when a school is a private school, when it provides medical...

The HIPPA Rules for dentists are the same as for any other healthcare provider that qualifies as a HIPAA covered...

If FTP is required to transfer protected health information, healthcare providers, health plans, healthcare clearinghouses and business associates of HIPAA-covered entities...

HIPAA for MSPs is a complicated subject to approach, as not only do MSPs count as Business Associates if they...

Whether telling a story about a patient is a HIPAA violation depends on who is telling the story, why the...

HIPAA continuity of care is when ongoing care is provided within a healthcare organization or Organized Health Care Arrangement, or...

When the HITECH ACT and Meaningful Use incentive program was enacted in 2009, it was described as “the most important...

What happens after a HIPAA complaint is filed can vary according to who it is filed with, whether or not...

Airdroid is a HIPAA-compliant all-in-one Android Mobile Device Management (MDM) solution for small businesses and enterprises that can be used...

A nurse can be fired for a HIPAA violation if the nature of the violation is sufficiently serious to warrant...

WhatsApp is not HIPAA compliant and should not be used for receiving, storing, or sending Protected Health Information unless a...

HIPAA took effect in various stages following the passage of the Health Insurance Portability and Accountability Act in 1996, with...

Doctors can share patient information with other doctors provided the disclosure complies with the Privacy Rule – and a BAA...

What information hospitals can give over the phone depends on the purpose of the phone call, the recipient of the...

Although the 21st Century Cures Act did not directly amend HIPAA, subsequently Rulemaking could create Cures Act compliance challenges for HIPAA...

The Texas OIG exclusions database is a list of excluded individuals and entities similar to the federal HHS OIG exclusion...

HHS OIG federal exclusions are sanctions on individuals and organizations that have violated a clause in §1128 of the Social...

HIPAA enforcement discretion occurs when the Secretary for Health and Human Services (HHS) announces the Department will exercise discretion in...

Paubox is HIPAA compliant and as an email encryption solution supports HIPAA compliance and can be used by Covered Entities...

The issue with answering the question is Qualtrics HIPAA compliant is that, although the “experience management” platform appears to support...

Whether or not a HIPAA violation will show up on a background check depends on the nature of the violation,...

The HIPAA compliance guidelines provide a comprehensive starting point for HIPAA compliance in three distinct sections. Part One: An examination...

A number of sources discussing HIPAA compliance for dermatologists suggest all dermatologists are required to comply with HIPAA because they...

The privacy standards of HIPAA apply to minors inasmuch as a minor’s health information is subject to the same Privacy...

What happens if you break HIPAA Rules depends on whether you are a covered entity or business associate, or a...

The main objective of HIPAA law is to protect the privacy of an individuals’ health information while at the same...

Misunderstandings can sometimes exist with the distinction between a HIPAA security incident and the definition of a HIPAA breach. Although...

Many sources explaining why HIPAA compliance is important for healthcare professionals tend to focus on the purpose of HIPAA regulations...

According to HHS’ Enforcement Highlights web page, the most common issue alleged in complaints to the Office for Civil Rights...

The Objectives of the HIPAA Privacy Laws The HIPAA privacy laws were first enacted in 2002 with the objective of...

The HIPAA definition of Covered Entities is generally explained as health plans, health care clearinghouses, and health care providers that...

The Health Insurance Portability and Accountability Act of 1996 is one of the most important pieces of legislation to affect...

The new HIPAA Safe Harbor Law (HR 7898) is an amendment to the HITECH Act which instructs the Secretary of...

In answer to the question is saying someone died a HIPAA violation, it depends on who is making the statement,...

HIPAA stands for the Health Insurance Portability and Accountability Act – an Act passed by Congress in 1996 with the...

HIPAA compliance for self-insured group health plans – or self-administered health group plans – is a complicated areas of HIPAA...

The terms covered entity and business associate are used widely through HIPAA legislation, but what are the differences between a...

According to several media sources, there appears to be a degree of confusion about the purpose of HIPAA and HIPAA...

The Meaningful Use Stage 1 Requirements are that providers must adopt certified Electronic Health Records (EHRs) and use the EHRs...