Anyone who finds out he or she needs a diagnostic test urgently already has a lot on their mind. The last thing they are probably thinking about is how long it will take for their insurance plan to decide if it is even going to cover the test.
At one Florida facility, patients came to outpatient clinics asking to see a clinician right away, but no one was available immediately. Registrars were put in the position of asking these patients to wait without knowing their needs.
Vendors always have been one of the most worrisome parts of HIPAA security because hospitals and health systems must rely on them for the appropriate technological and physical security for protected data — without the ability to dictate exactly how.
There is no quick and easy way to select a vendor to trust with HIPAA-sensitive data. It requires some legwork to determine what kind of security they have in place and possibly identify any shortcomings.
Despite years of educating healthcare staff about the need for data security and the myriad ways people can worm their way into an otherwise secure system, employees still can fall prey to social engineering scams and allow HIPAA data breaches.