Data Privacy
05.08.20
Associate
08.28.19
SAMHSA announces proposed revisions to Part 2 confidentiality...
On August 26, 2019, the Substance Abuse and Mental Health Services Administration (SAMHSA) issued a Notice of Proposed Rule Making (NPRM) outlining revisions to the Confidentiality of Substance Use Disorder Patient Records (Part 2) regulations. The proposed rule in part reflects SAMHSA‘s efforts to facilitate and enhance coordination of care for substance use disorders (SUD) while still maintaining Part 2 confidentiality protections.
Category Data Privacy
07.16.19
OCR releases new set of FAQs to address health plans’ use of...
On June 26, 2019, the Department of Health and Human Services Office for Civil Rights (OCR) released a new FAQ document to address how the HIPAA Privacy Rule allows health plans to share PHI in certain circumstances.
Category Data Privacy
06.11.19
Failure to conduct risk analysis leads to OCR penalties for...
On May 23, 2019, the Department of Health and Human Services Office for Civil Rights (OCR) announced that Medical Informatics Engineering, Inc. (MIE) had agreed to pay $100,000 to OCR and adopt a corrective action plan to settle possible violations of the HIPAA Privacy and Security Rules.
Category Data Privacy
05.23.19
OCR revises HIPAA annual penalty limits to address culpability
OCR published the Notification to alert the public that OCR is exercising its discretion in assessing Civil Money Penalties under HIPAA as amended by the HITECH Act.
Category Data Privacy
04.22.19
OCR releases new set of FAQs to address transmission of ePHI to...
On April 18, 2019, the Department of Health and Human Services Office for Civil Rights (OCR) released new FAQs relating to HIPAA right of access to ePHI.
Category Data Privacy
01.02.19
Failure to have business associate agreement in place leads to...
On December 4, 2018, the Department of Health and Human Services Office for Civil Rights (OCR) announced that Advanced Care Hospitalists PL (ACH) had agreed to pay $500,000 to OCR and adopt a corrective action plan to settle possible violations of the HIPAA Privacy and Security Rules.
Category Data Privacy
