ePHI

Health Innovation December 28, 2015

When Does the HIPAA Conduit Exception Rule Apply?

By Gene Fry – The HIPAA conduit exception rule is only applicable to providers of purely conduit services who do not have access to protected health information (PHI) other than infrequently or randomly. For this reason, conduit providers do not have to sign a Business Associate Agreement (BAA). But what exactly is a conduit service, and when does the HIPAA conduit exception rule apply?

Health Innovation December 16, 2015

What We can Learn from Lahey Hospital and Medical Group’s $850,000 Breach

By Steve Spearman – The Office of Civil Rights (OCR) has issued a press release saying that following a security breach, Massachusetts-based Lahey Hospital and Medical Group has agreed to a settlement with OCR that requires it to pay $850,000 and make a “robust” corrective plan to restructure its HIPAA compliance strategy.

Health Innovation November 16, 2015

Don’t Become a Data Horror Story

As an IT professional in the healthcare industry, you know the importance — indeed, the legal necessity — of ensuring that your organization’s patient information remains protected at all times. That’s why we’ve consolidated 10 best practices for you, from healthcare IT thought leaders, in a new eFax Corporate® infographic

Meaningful Use and EHR Incentives, Promoting Interoperability (PI) October 23, 2014

New Guidance on Protect Electronic Health Information Core Objective

If you are a provider participating in the EHR Incentive Programs, conducting or reviewing a security risk analysis is required to meet Stage 1 and Stage 2 of meaningful use. This meaningful use objective complements, but does not impose new or expanded requirements on the HIPAA Security Rule.