HIPAA Access Control: Safeguarding ePHI and Protecting Your Business
In today’s digital world, protecting sensitive data is paramount. This is especially true for organizations that handle electronic Protected Health Information (ePHI), whether you’re a healthcare provider, a business associate, or even an agent or broker...
Who is Responsible for Employee Health Information?
Organizations are responsible for protecting their employees’ personal information. This is regulated under different laws, and by different state and federal agencies. Depending on the kinds of health benefits provided to employees, there are some different...
Building a Culture of Compliance
Culture takes shape in every type of organization, whether it’s a business or a sports team. This happens as certain behaviors become the norm, whether by design or by accident. Prosperous companies make deliberate choices about the qualities they want their...
Understanding the Common Agency Provision in HIPAA – aka “Basis for a Civil Money Penalty,” or 45 CFR § 160.402
Who does this apply to? In the extensive world of rules and regulations related to HIPAA, it’s crucial to have a clear grasp of specific rules for both legal and ethical reasons. Section 45 CFR § 160.402 is often referred to as the “Common Agency...