Tag Archives: HIPAA
HIPAA Final Rule Posted
This afternoon, the Department of Health and Human Services posted a long-awaited, 563-page omnibus final rule under HIPAA, which will be published in the Federal Register on January 25, 2013, and which makes a variety of modifications to HIPAA’s Privacy, Security, Breach … Continue reading
HIPAA Enforcement for Breach Involving Less than 500 Patients
The U.S. Department of Health and Human Services (HHS) initiated a compliance investigation after the Hospice of North Idaho (HONI) reported to HHS that an unencrypted laptop computer containing the electronic protected health information (ePHI) of 441 patients had been … Continue reading
The danger of unencrypted protected health information: 55,000 patients’ PHI exposed.
An Indianapolis oncology group has disclosed that data concerning about 55,000 patients was stored on a stolen laptop computer. A backup copy of the Cancer Care Group’s server was stored on the computer, which was stolen from a locked car. … Continue reading
When HIPAA Investigations Broaden To Scrutinize Unrelated Business Practices: The Settlement between the State of Minnesota and Accretive Health
Prosecutions involving breaches of protected health information under the Health Insurance Portability and Accountability Act (“HIPAA”) are becoming more frequent; we have noted recent civil settlements involving providers in Massachusetts and Alaska, as well as a criminal prosecution in California. … Continue reading
Alaska Department of Health and Social Services Pays $1.7 Million to Settle HIPAA Security Rule Matter
Today, the Office of Civil Rights (“OCR”) of the Department of Health and Human Services (“HHS”) announced that the Alaska Department of Health and Social Services (Alaska DHSS), which is that state’s Medicaid agency, has agreed to pay $1.7 million to … Continue reading
HIPAA: Conversion to Version 5010
As of January 1, 2012, all healthcare providers were required to transition from version 4010/4010A to version 5010 standards for submitting electronic transactions, and the failure to comply may result in claim denials or a government investigation. CMS has repeatedly … Continue reading
Hospital Settles Data Breach Allegations with Massachusetts Attorney General
Late last month, the Massachusetts Attorney General, Martha Coakley, announced that her office had reached a settlement with South Shore Hospital regarding alleged violations of the Massachusetts Consumer Protection Act and the Health Insurance Portability and Accountability Act (“HIPAA”) stemming from … Continue reading
Ninth Circuit on HIPAA Criminal Liability: No Knowledge Requirement
On May 10, 2012, the United States Court of Appeals for the Ninth Circuit issued its opinion in United States v. Zhou, No. 10-50231 (9th Cir. May 10, 2012), and held that the criminal misdemeanor provision of the Health Insurance … Continue reading
HHS Proposes Rule Giving Patients Direct Access to Lab Test Results
Yesterday, the U.S. Department of Health and Human Services (“HHS”) published a proposed rule in the Federal Register which would allow medical patients to get their laboratory test results directly from the lab. A copy of this proposed rule is … Continue reading
HIPAA-Based Criminal Indictment for Communicating with Patient’s Employer
A Virginia physician has become the first person criminally indicted under the Health Insurance Portability and Accountability Act (HIPAA) for communicating with a former patient’s employer. According to the United States Attorney for the Eastern District of Virginia, Dr. Richard Kaye, the … Continue reading