Health Law Advisor

DECEMBER 5, 2022

The bulletin advises that “[r]egulated entities are not permitted to use tracking technologies in a manner that would result in impermissible disclosures of Protected Health Information (“PHI”) to tracking technology vendors or any other violations of the HIPAA Rules.”

HIPAA 98

HIPAA Doctors Health Insurance Compliance 98

HIPAA Journal

JULY 5, 2024

An investigation was launched which determined that between November 2, 2023, and March 29, 2024, the vendor accessed and downloaded information from a Kairos database. No Social Security numbers, driver’s license numbers, or financial account information were accessed or downloaded.

Licensing 109

Licensing HIPAA Health Insurance 109

HIPAA Journal

JANUARY 2, 2023

The settlements pursued by the Department of Health and Human Services’ Office for Civil Rights (OCR) are for egregious violations of HIPAA Rules. Settlements are also pursued to highlight common HIPAA violations to raise awareness of the need to comply with specific aspects of HIPAA Rules.

HIPAA 110

HIPAA Compliance Hospitals Medicare 110

Compliancy Group

MAY 5, 2023

As healthcare professionals continue to work from home, many are facing the challenge of ensuring that they remain HIPAA compliant in a remote environment. HIPAA (Health Insurance Portability and Accountability Act) is a federal law that requires healthcare providers to secure protected health information (PHI) and maintain its privacy.

HIPAA 52

HIPAA Compliance Health Insurance Doctors 52

HIPAA Journal

OCTOBER 7, 2022

On August 5, 2022, Anthem discovered that an unauthorized individual had gained access to a database and downloaded files containing plan members’ protected health information, including names, addresses, dates of birth, phone numbers, email addresses, Medicare ID numbers, and Medicaid ID numbers.

HIPAA 111

HIPAA Health Insurance Medicaid Medicaid 111

HIPAA Journal

DECEMBER 1, 2022

An unauthorized individual was found to have gained access to its network and downloaded files containing the protected health information of 45,785 patients. California Health Insurance Agency Suffers Data Breach Affecting 14,600 Patients.

Health Insurance 113

Health Insurance Ransomware HIPAA Governance 113

HIPAA Journal

JULY 3, 2024

The file review confirmed that the exposed data included first and last name, address, phone number, email address, birth date, gender, Social Security number, medical record number, clinical information, prescription information, medical information, health information, and health insurance information.

Ransomware 124

Ransomware Health Insurance Hospitals HIPAA 124

MedTrainer

FEBRUARY 19, 2024

The Health Insurance Portability and Accountability Act (HIPAA) has been a cornerstone healthcare regulation since 1996. Twenty-eight years later, the importance of HIPAA compliance in healthcare has not waned. What is HIPAA?

HIPAA 52

HIPAA Compliance Health Insurance Governance 52

HIPAA Journal

JUNE 9, 2022

The forensic investigation found no evidence to suggest any of that information was viewed or downloaded, and no reports have been received of any instances of actual or attempted misuse of the data. The post Email Account Breaches Reported by Allaire Healthcare Group and Platinum Hospitalists appeared first on HIPAA Journal.

Licensing 128

Licensing HIPAA Health Insurance Hospitals 128

HIPAA Journal

JUNE 29, 2022

On June 25, 2022, a spokesperson for a threat group called DAIXIN Team contacted HIPAA Journal to share information about a ransomware attack and data theft incident at Fitzgibbon Hospital in Marshall, Missouri. DAIXIN Team was previously not known to HIPAA Journal and appears to be a new ransomware group.

Ransomware 127

Ransomware Hospitals HIPAA Health Insurance 127

HIPAA Journal

FEBRUARY 8, 2023

During that time the third party downloaded a file that contained patient data. Financial information, contact information, dates of birth, Social Security numbers, health insurance information, or medical information were not accessed or stolen in the attack.

Medical Billing 99

Medical Billing HIPAA Health Insurance 99

Total HIPAA

OCTOBER 28, 2019

A newsletter on the importance of importance of HIPAA logging requirements states this: 1. HIPAA log retention is also crucial; if the hospital had not archived the logs, investigators could not have found the incriminating records. What HIPAA Security Rule Mandates. What HIPAA Security Rule Mandates.

HIPAA 52

HIPAA Compliance Fraud Hospitals 52

HIPAA Journal

SEPTEMBER 8, 2023

For patients, the affected information included name, address, email, phone number(s), birth date, Social Security number, driver’s license number, health insurance policy information, treatment information including radiographic images, medical record number, account number, and health conditions.

Licensing 108

Licensing Ransomware Health Insurance HIPAA 108

HIPAA Journal

NOVEMBER 17, 2022

New York-Presbyterian Hospital has recently announced that unauthorized individuals gained access to one of its servers and attempted to download sensitive data. The security system detected the intrusion on September 8, 2022, and successfully blocked the attempted download. The electronic record system was unaffected.

Ransomware 84

Ransomware Health Insurance HIPAA Fraud 84

HIPAA Journal

NOVEMBER 8, 2023

The compromised information included names, addresses, dates of birth, Social Security numbers, driver’s license numbers or state IDs, medical treatment information, and health insurance information. The post November 8, 2023, Healthcare Data Breach Round-Up appeared first on HIPAA Journal.

Ransomware 110

Ransomware Licensing Health Insurance HIPAA 110

HIPAA Journal

FEBRUARY 16, 2023

While the investigation into the breach is ongoing, Edgepark Medical Supplies was informed that the files potentially accessed included names, email addresses, phone numbers, provider information, diagnoses, expected delivery dates, and health insurance information. The breach was confined to Rise Interactive’s systems.

HIPAA 96

HIPAA Health Insurance 96

HIPAA Journal

APRIL 18, 2022

numbers, financial account numbers, passport numbers, medical information, and/or health insurance information. While unauthorized email account access was confirmed, it was not possible to tell if any emails or attachments in the accounts had been viewed or downloaded.

Licensing 122

Licensing HIPAA Health Insurance Hospitals 122

Total HIPAA

APRIL 19, 2023

Introduction: As a health insurance agent, understanding the complexities of the Health Insurance Portability and Accountability Act, or HIPAA, is essential. One of the critical aspects of HIPAA is the Business Associate Agreement (BAA). What is included in a typical Business Associate Agreement?

HIPAA 52

HIPAA Compliance Health Insurance 52

Health Populi

JULY 24, 2023

In the program’s FAQs, one question clearly addresses this, transparently and in layperson’s terms: Q: “Do I need health insurance to use GNC Health?” ” A: “Nope — insurance isn’t needed or accepted.” Cost, cost, cost, cost, and cost — above quality of care.

Health Insurance 118

Health Insurance Medical Billing Licensing HIPAA 118

HIPAA Journal

MAY 17, 2022

The review of the files revealed they mostly contained protected health information such as names, addresses, medical information, and/or health insurance information. Notification letters have now been sent to the 28,024 patients whose protected health information has potentially been compromised.

Health Insurance 94

Health Insurance Licensing Ransomware HIPAA 94

HIPAA Journal

APRIL 1, 2022

Last week, SRHD confirmed that the email account contained the protected health information of 1,260 individuals. That information may have been ‘previewed’ by an unauthorized individual, although no evidence was found to suggest information had been accessed or downloaded.

Fraud 137

Fraud HIPAA Licensing Health Insurance 137

AIHC

APRIL 10, 2024

HITECH is a critical aspect of the Health Insurance Portability & Accountability Act (HIPAA). Since 2009, HITECH has given “teeth” to HIPAA law. What’s the difference between HIPAA and HITECH? HIPAA guarantees patients access to their paper medical records. Understanding HIPAA is crucial.

Compliance 99

Compliance US Department of Health and Human Services HIPAA Electronic Medical Records 99

HIPAA Journal

JANUARY 27, 2023

The data potentially accessed included names, birth dates, Social Security numbers, financial information, driver’s license numbers, biometric information, diagnosis and treatment information, and health insurance information. This coincides with the 60-day reporting deadline of the HIPAA Breach Notification Rule.

Ransomware 101

Ransomware HIPAA Fraud Licensing 101

HIPAA Journal

JUNE 1, 2023

The files potentially viewed or stolen included names, addresses, dates of birth, health insurance information, medical record numbers, and some health information. A review was conducted to determine if any files had potentially been downloaded to the laptop that could have been accessed.

Hospitals 93

Hospitals Electronic Medical Records HIPAA Health Insurance 93

MedTrainer

MAY 20, 2024

Download the Ultimate List of Training Requirements for FQHCs (CHCs) to see a full list of federal training requirements broken down by role, with the applicable standard and frequency. Below are courses common to many roles in FQHCs that meet federal requirements.

Compliance 52

Compliance HIPAA Health Insurance Medicaid 52

MedTrainer

MAY 21, 2024

Behavioral Health Compliance Training Requirements There isn’t a universal list of training requirements for all behavioral health professionals. Training requirements vary by role and specific healthcare setting.

Compliance 52

Compliance Medicaid Medicaid HIPAA 52

MedTrainer

MAY 16, 2024

Download the Ultimate List of Training Requirements for Ambulatory Surgery Centers to see a full list of federal and accreditation training requirements for ASC staff broken down by role, with the applicable standard, CMS violation category, and frequency. Staff should review the requirements for their specific state to remain in compliance.

Compliance 52

Compliance HIPAA Health Insurance Medicaid 52

MedTrainer

AUGUST 9, 2024

These regulations can encompass federal and state laws, directives from regulatory agencies such as the Centers for Medicare & Medicaid Services ( CMS ), Health Insurance Portability and Accountability Act ( HIPAA ) mandates, and standards established by accreditation bodies like The Joint Commission.

Compliance 52

Compliance HIPAA Governance Health Insurance 52

HIPAA Journal

MARCH 10, 2022

The files exfiltrated from its systems included the protected health information of patients. Assisted by a third-party cybersecurity firm, APTG determined on January 7, 2022, that files containing the protected health information of 14,970 patients may have been exfiltrated from its network between December 23, 2021, and December 28, 2021.

Ransomware 133

Ransomware Licensing Health Insurance HIPAA 133

MedTrainer

JULY 30, 2024

Download this guide to calculate your potential savings. Automatic Tracking: Since healthcare organizations must be able to show regulatory and accreditation agencies proof of course completion, automated tracking is critical.

Compliance 52

Compliance Compliance Framework HIPAA ADA 52

HIPAA Journal

FEBRUARY 13, 2023

The forensic investigation confirmed that AWS S3 storage buckets were accessed by the attackers, the contents of those buckets were downloaded, then the data in the buckets were deleted. The lawsuit alleged a failure to comply with its obligations under HIPAA and a failure to adhere to industry standard cybersecurity best practices.

HIPAA 74

HIPAA Fraud Health Insurance 74

HIPAA Journal

AUGUST 10, 2023

Omaha Health Insurance Company The Omaha Health Insurance Company (OHIC), part of Mutual of Omaha, has reported a security breach at a third-party vendor that exposed the records of individuals who were enrolled in the Medicare Part D Prescription Drug Plan, which was issued by Mutual of Omaha Rx.

Medicaid 52

Medicaid Medicaid Health Insurance HIPAA 52

MedTrainer

MARCH 8, 2024

Specific topic areas include: HIPAA: The Health Insurance Portability and Accountability Act is a federal law that governs the privacy and security of patient health information. Compliance training should cover the key provisions of HIPAA, including the Privacy Rule, Security Rule, and Breach Notification Rule.

Compliance 52

Compliance Fraud Governance HIPAA 52

Verisys

NOVEMBER 8, 2023

CMS.gov The Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) required the creation of a standard, unique health identifier for healthcare providers, which the NPI satisfies. Why Are NPI Numbers Necessary? Complete instructions are found on the CMS website.

Fraud 97

Fraud HIPAA Medicare Medicare 97

MedTrainer

JULY 31, 2024

Download this guide to calculate your potential savings. Automatic Tracking: Since healthcare organizations must be able to show regulatory and accreditation agencies proof of course completion, automated tracking is critical.

Compliance 52

Compliance HIPAA Compliance Framework ADA 52

MedTrainer

JUNE 11, 2024

Download this guide to calculate your potential savings. Automatic Tracking: Since healthcare organizations must be able to show regulatory and accreditation agencies proof of course completion, automated tracking is critical.

Compliance 52

Compliance Compliance Framework HIPAA ADA 52

Healthcare IT Today

DECEMBER 15, 2023

Simply open a mobile app and download the report to your smartphone. In Europe, this is GDPR (General Data Protection Regulation), in America, it’s HIPAA (Health Insurance Portability and Accountability Act). AWS solutions require software compatible with HIPAA standards.

Electronic Medical Records 117

Electronic Medical Records Doctors HIPAA Hospitals 117