Last month, Memorial Healthcare System (MHS) agreed to implement a comprehensive corrective action plan and pay a 5.5-million-dollar settlement for the breach of protected health information (PHI) that affected over 100,000 individuals. This is the second largest fine against a covered entity to date, sending a strong message that audit controls will be a key...
Author: Tyler Howard (Tyler Howard)
HIPAA Audits of Covered Entities and Business Associates
In August, Advocate Health Care Network agreed to pay a $5.55 million settlement with the U.S. Department of Health and Human Services Office for Civil Rights (OCR), for multiple HIPAA violations. In addition, HHS also recently announced a $650,000 resolution settlement against the Catholic Health Care Services of the Archdiocese of Philadelphia. These multi-million dollar...
OSHA Final Rule for Tracking Workplace Injuries and Illnesses
To prevent work-related injuries and illness, The Occupational Safety and Health Administration requires employers to record work-related injuries and illnesses in an “OSHA log.” OSHA is now issuing a new rule which requires certain employers to submit injury and illness data electronically, effective January 1, 2017. What does the final rule do? The new rule...
The Final 5 – MACRA Rule
Five Facts to Know about the Final MACRA Rule The Medicare Access and CHIP Reauthorization Act (MACRA) has been finalized and will affect all providers that care for at least 100 Medicare patients or bill more than $30,000 a year. CMS made some critical revisions to the previous bill which includes a more flexible start...
The Basics on Business Associates and Contract Agreements
What is a Business Associate? Business associates are considered any third-party contractor that performs work or activities on behalf of a healthcare organization or covered entity that involve the use or disclosure of protected health information (1). A few examples may include: What are Business Associate Agreements? HIPAA and HITECH require practices to sign a...
Curiosity Has Its Cost
Back in June, the victims of the horrific Orlando shooting at Pulse Nightclub were also victims of a privacy breach when their personal health information was accessed without authorization by a few curious employees at Orlando Health Hospital. The hospital confirmed that employees have previously received HIPAA training on patient privacy. However, they are now...
HIPAA Section 1557 Language Access Requirements
Who does the rule apply to? Section 1557 is the non-discrimination provision of the Affordable Care Act (ACA) that protects individuals from discrimination in health care based on race, color, national origin, age, disability, and sex; including discrimination based on pregnancy, gender identity and sex stereotyping. The rule also protects individuals with disabilities and limited...
Formaldehyde: Is Your Healthcare Facility Prepared?
The failure to properly train employees on hazardous chemicals such as formaldehyde is the second most frequently cited violation in healthcare facilities across the US. In fact, fines as much as $112,000 have been issued by The Occupational Safety and Health Administration (OSHA) to healthcare facilities for the failure to provide employees with the proper...
The Stark Basics for Medical Practices
The Stark Law can be a source of confusion for a lot of medical practices and rightfully so. It was enacted in 1989, but has since been expanded upon and revised several times, with additional phases added much later. In its simplest form, the Stark Law prohibits a physician from making referrals for certain healthcare...
OSHA Implements a 78% Increase in Penalties- Is Your Office Compliant?
The Occupational Safety and Health Administration (OSHA) just issued new penalty adjustments that will go into effect this month, based on recent legislation that requires federal agencies to adjust their civil penalties to account for inflation. It has been more than 25 years since OSHA last adjusted their maximum penalties, therefor an increase of 78%...