Matthew Fisher

The Cloud is Good, But Know Where Data Go

By Matt Fisher – A recent settlement announcement from the U.S. Department of Health and Human Services Office for Civil Rights (“OCR”) highlights the need to evaluate web-based applications and storage solutions. Web-based or cloud solutions are viable options and tools for healthcare entities to utilize, but those tools need to evaluated for compliance with HIPAA security requirements.

Read More

HIPAA Criminal Violations on the Rise

By Matt Fisher – Stories appear almost everyday about medical records being improperly accessed, hacked or otherwise being stolen. The number of stories about such thefts is almost matched by the number of stories about the high value placed upon medical records by identity thieves and others.


Health and Electronic Security

By Matt Fisher – The rapid adoption of electronic health records (“EHR”) and other new technology in healthcare has resulted in the introduction of serious security threats. Numerous stories and reports have made it clear that hackers, criminals and others view the healthcare industry as a ripe target due to security vulnerabilities. This issue is exacerbated by the high value placed upon medical records in the black market.



What is a Board To Do?: Some Guidance from the OIG

By Matt Fisher – A practical guide for the governing boards of healthcare organizations was recently released through the joint effort of the Office of the Inspector General (“OIG”) of the Department of Health and Human Services, the American Health Lawyers Associated, the Association of Healthcare Internal Auditors and the Health Care Compliance Association.


Don’t Forget the Paper: Records and Policies

By Matt Fisher – Another HIPAA breach settlement announcement and another lesson from the Department of Health and Human Services Office for Civil Rights (“OCR”). Cornell Prescription Pharmacy (“Cornell”) is a single location pharmacy located in Colorado that will pay OCR $125,000 to resolve allegations of a variety of HIPAA violations. When the facts of the circumstances are described, it will likely raise questions as to why the settlement was so low.




Concerns for Preferred Provider Agreements

By Matt Fisher – Advisory Opinion 15-04 issued by the Office of the Inspector General (“OIG”) on March 25, 2015 offers some warnings when entering into preferred provider agreements. The new Advisory Opinion arose in the context of laboratory services, but the principles discussed are easily applicable to any preferred provider arrangement. The advice and insight are important in light of the increasing desire among providers to identify and enter into preferred provider agreements.