Matthew Fisher

Do Your Risk Analysis

By Matt Fisher – The drumbeat of settlement agreements for alleged HIPAA violations by the Office for Civil Rights is continuing along with the consistent finding that the required risk analysis did not occur. The consistent announcement of settlements offers regular reminders to the healthcare industry that OCR is watching and expecting compliance to improve.

Read More

Be Truthful to Get Patients

By Matt Fisher – Imagine this scenario: an individual is suffering from substance use disorder and decides to seek help. A big reason for not getting treatment is reportedly not knowing how or where to get treatment, not being able to afford the treatment, and/or not finding a program or clinician where they wanted to be able to go.


Insider Risks

By Matt Fisher – The risk to privacy and security of healthcare information, despite all of the headlines, does not only come from outside attackers. Inside threats are real and can go undetected for potentially longer periods of time.





Breach Report Begets Settlement

By Matt Fisher – Whenever an entity subject to HIPAA experiences a data breach, notification must be given to the Office for Civil Rights. Once OCR receives notification of a breach, an investigation will typically follow. That combination is a sure way for broader issues to be uncovered. That is the scenario that played out in the most recent settlement announced by OCR.