What is Access Control in terms of HIPAA?
Access control, in terms of cybersecurity, refers to the practice of managing and regulating who can access specific resources, systems, or data within an organization’s network or information technology environment. The primary goal of access control is to...
Six Compelling Reasons to Begin Your HIPAA Compliance Journey Before the Year Ends
As 2023 unfolds, the urgency for entities in the healthcare sector to initiate or reinforce their HIPAA compliance cannot be overstated. This isn’t just about ticking off a checklist; it’s about safeguarding the future of your organization, whether...
Comparing HIPAA and NIST
In the ever-evolving landscape of data security and privacy, two key frameworks have emerged as significant players: HIPAA and NIST. Both emphasize the importance of safeguarding sensitive information, but they have key differences in their scope, mandate, and...
Who is Responsible for Employee Health Information?
Organizations are responsible for protecting their employees’ personal information. This is regulated under different laws, and by different state and federal agencies. Depending on the kinds of health benefits provided to employees, there are some different...
Building a Culture of Compliance
Culture takes shape in every type of organization, whether it’s a business or a sports team. This happens as certain behaviors become the norm, whether by design or by accident. Prosperous companies make deliberate choices about the qualities they want their...
Understanding the Common Agency Provision in HIPAA – aka “Basis for a Civil Money Penalty,” or 45 CFR § 160.402
Who does this apply to? In the extensive world of rules and regulations related to HIPAA, it’s crucial to have a clear grasp of specific rules for both legal and ethical reasons. Section 45 CFR § 160.402 is often referred to as the “Common Agency...
Artificial Intelligence in HIPAA Compliance
What is AI? Artificial intelligence is the science of making machines that can learn, similar to the ways humans do. AI technology can process large amounts of data in ways that humans can’t. Machines and programs that incorporate AI in their design are able to...
How to Handle Subcontractors Under HIPAA
There are many scenarios in business and healthcare in which PHI is moved and shared. In the 1990s a lot of this happened over fax machines, over the phone and in person. In the modern landscape software and the internet are used to manage all data including protected...