Healthcare data breaches are costing the U.S. healthcare industry nearly $6.2 billion each year. (2) In fact, healthcare has the highest cost per breached record of any other industry. Why? Healthcare is extremely attractive to hackers because medical records include everything they need such as: names, Social Security numbers, date of birth, credit card information,...
Author: Tyler Howard (Tyler Howard)
Transparency and Patient Safety
Transparency is considered an essential element to improving the quality of health care. Without transparency, patients cannot make informed decisions. Without transparency, it is not possible to have a culture of safety. What is transparency? Transparency is defined as the free and uninhibited flow of information that is open to the scrutiny of others. (2)...
$5.5 Million Breach Settlement: Second Largest Fine to Date
Last month, Memorial Healthcare System (MHS) agreed to implement a comprehensive corrective action plan and pay a 5.5-million-dollar settlement for the breach of protected health information (PHI) that affected over 100,000 individuals. This is the second largest fine against a covered entity to date, sending a strong message that audit controls will be a key...
HIPAA Audits of Covered Entities and Business Associates
In August, Advocate Health Care Network agreed to pay a $5.55 million settlement with the U.S. Department of Health and Human Services Office for Civil Rights (OCR), for multiple HIPAA violations. In addition, HHS also recently announced a $650,000 resolution settlement against the Catholic Health Care Services of the Archdiocese of Philadelphia. These multi-million dollar...
OSHA Final Rule for Tracking Workplace Injuries and Illnesses
To prevent work-related injuries and illness, The Occupational Safety and Health Administration requires employers to record work-related injuries and illnesses in an “OSHA log.” OSHA is now issuing a new rule which requires certain employers to submit injury and illness data electronically, effective January 1, 2017. What does the final rule do? The new rule...
The Final 5 – MACRA Rule
Five Facts to Know about the Final MACRA Rule The Medicare Access and CHIP Reauthorization Act (MACRA) has been finalized and will affect all providers that care for at least 100 Medicare patients or bill more than $30,000 a year. CMS made some critical revisions to the previous bill which includes a more flexible start...
The Basics on Business Associates and Contract Agreements
What is a Business Associate? Business associates are considered any third-party contractor that performs work or activities on behalf of a healthcare organization or covered entity that involve the use or disclosure of protected health information (1). A few examples may include: What are Business Associate Agreements? HIPAA and HITECH require practices to sign a...
Curiosity Has Its Cost
Back in June, the victims of the horrific Orlando shooting at Pulse Nightclub were also victims of a privacy breach when their personal health information was accessed without authorization by a few curious employees at Orlando Health Hospital. The hospital confirmed that employees have previously received HIPAA training on patient privacy. However, they are now...
HIPAA Section 1557 Language Access Requirements
Who does the rule apply to? Section 1557 is the non-discrimination provision of the Affordable Care Act (ACA) that protects individuals from discrimination in health care based on race, color, national origin, age, disability, and sex; including discrimination based on pregnancy, gender identity and sex stereotyping. The rule also protects individuals with disabilities and limited...
Formaldehyde: Is Your Healthcare Facility Prepared?
The failure to properly train employees on hazardous chemicals such as formaldehyde is the second most frequently cited violation in healthcare facilities across the US. In fact, fines as much as $112,000 have been issued by The Occupational Safety and Health Administration (OSHA) to healthcare facilities for the failure to provide employees with the proper...