Articles Tagged With: PHI
-
OCR Releases Guidance on Audio-Only Telehealth
The Office for Civil Rights (OCR) recently issued guidance on how covered entities can use audio-only telehealth services in compliance with HIPAA. In line with what is referred to as the common carrier exception, OCR clarified the Security Rule does not apply to audio-only telehealth services provided by a covered entity that is using a standard landline.
-
Breach Report Reveals 61% Increase in Breaches Affecting 500+
OCR recently submitted a report to Congress setting forth the HIPAA breaches and complaints reported in 2020 as well as the enforcement actions taken by OCR. For 2020, OCR reported 656 notifications of breaches affecting 500 or more individuals, 66,509 notifications of breaches affecting fewer than 500 individuals, and 27,182 complaints alleging violations of HIPAA and the HITECH Act. -
HHS Guidance Addresses HIPAA and Emergency Protective Orders
HHS recently issued guidance about HIPAA compliance when information must be released in conjunction with an extreme risk protection order. The guidance will be useful for risk managers and compliance officers, but may present some challenges when trying to adhere to HIPAA restrictions. -
HIPAA Relevance to COVID-19 Vaccinations Can Be Misunderstood
Employees and employers frequently believe HIPAA comes into play when asking about an individual’s vaccination status. It almost always does not. Although some states are considering legislation designating vaccination status as a separate protected class, private employers generally are free to ask employees about their vaccination status without running afoul of HIPAA or federal employment laws. -
HIPAA Changes Coming in 2022 Might Require Policy Revisions
Proposed changes to HIPAA and HITECH may affect covered entities and business associates in 2022. Now is the time to consider any effects, and respond accordingly. The modifications could require updates to policies and procedures, notices of privacy practices, forms, business associate agreements, and other HIPAA-related compliance issues. -
Whistleblower Exception Allows Reporting HIPAA Violations with PHI
Healthcare professionals can find themselves in a quandary when they want to report fraud or other concerns within their organizations because doing so could require disclosure of protected health information. That could seem like a HIPAA violation; fortunately, there is a whistleblower exception that covers this scenario.
-
Permitted uses of PHI explained in ONC blog
The Office of the National Coordinator for Health Information Technology has launched a new four-part blog series to explain how the Health Insurance Portability and Accountability Act not only protects personal health information from misuse, but also allows health information to be accessed when it is needed for patient care.
-
Denying Release of PHI can be a HIPAA Violation
For 20 years now, risk managers have drilled into their staffs the importance of HIPAA compliance. But has that message been oversold?