HIOs and Regional Health Information Networks (RHINs) are being created to facilitate the exchange of information among providers. HIOs and RHINs are typically not statutorily governed by HIPAA, other than perhaps as Business Associates. The HHS guidance, issued in conjunction with The Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information, covers
HIPAA, HIT, and EHR
HHS and Covered Entity Agree to HIPAA Corrective Action Plan; $100,000 Penalty
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
The U.S. Department of Health and Human Services ("HHS") recently entered into a Resolution Agreement with Providence Health & Services ("Providence") of Seattle to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") Privacy and Security Rules. Under the Resolution Agreement, Providence agrees to pay $100,000 and implement a corrective…
HHS Office for Civil Rights Issues Guidance on Communicating with A Patient’s Family, Friends, and Others Involved in the Patient’s Care
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
The U. S. Department of Health and Human Services Office for Civil Rights recently issued helpful guidance for health care providers relative to communicating with a patient’s family, friends or others involved in the patient’s care. The guidance contains a number of commonly asked HIPAA questions as well as a helpful chart relative to disclosures. This…