If you’re using any IT services such as online backup, antivirus, or monitoring, or you use such a company for onsite or remote support, you need to make sure you’re using a HIPAA compliant IT company. But, how do you
OCR: Patch Management is Necessary for HIPAA Compliance
A new bulletin states that a lack of Patch Management protocols constitutes a HIPAA violation The Office of Civil Rights (OCR) recently opened an investigation into Anchorage Community Mental Health Services (ACMHS) following a breach of patient data affecting 2,743
Selecting and Training your HIPAA Privacy Officer
Under HIPAA, every practice large and small is required to designate a privacy officer. Many times, this role is given to the office manager or to the dentist. Under the HIPAA Privacy Officer title, this officer will need to dole
Stolen Cellphone without Mobile Device Management Leads to Breach
St. Peter’s Health Partners Reports Data Breach from Stolen Cellphone A data breach of a large hospital system occurred from a stolen cellphone belonging to one of the health system’s managers. As reported in Albany Business Review, the breach required notification
8 Unlikely HIPAA Data Breaches
Here are some unexpected sources of HIPAA data breaches Your data security plan likely focuses on your server, workstations, backup and external media. However, no matter how robust your security solution is, training and compliance must be met consistently among
Encrypted Email – a HIPAA requirement
Encrypted Email: Why You Need It If you are like most dental practices, you have gone through the steps to encrypt the data on your server. Your backups are encrypted, your shared folders are encrypted, and maybe even your PCs.
Phase 2 of HIPAA Audits Delayed
OCR announces that Phase 2 of randomized HIPAA audits has been delayed As all of our dental offices know, earlier this year the OCR announced Phase 2 of HIPAA Audits for October of 2014. However, due to unexpected hitches in
UC Davis HIPAA Breach from Hacked Email
UC Davis Suffers HIPAA Breach After a Physician’s Email Account is Hacked On Sept 25, 2014, the protected health information of over a thousand patients fell into the hands of an offsite hacker. Currently, the UC Davis IT team has
The Nine Components of a Dental Risk Assessment
By Dan Gospe The Nine Components of a Dental Risk Assessment The Department of Health and Human Services (HHS) requires dental practices to perform a risk assessment as a first step to achieving HIPAA compliance. Although there is no standardized
Risk Assessments for Dental Offices – How can your Dental IT Company help?
In the past, randomized HIPAA audits have been carried out by Health & Human Services and the Office for Civil Rights (HHS & OCR). First, an letter or phone call is made requesting your latest risk assessment. Those who have