The Department of Health and Human Services (HHS) has released a proposed rule that would modify the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule by allowing health care providers to make certain disclosures to the National Instant Criminal Background Check System (NICS).  The NICS aims to keep guns from being sold to those

A Massachusetts-based dermatology practice recently agreed to pay $150,000 to settle claims that it failed to have sufficient policies and procedures in place to address a breach notification requirement under the HITECH Act.  The investigation was initiated following a report that an unencrypted thumb drive containing electronic protected health information of approximately 2,200 individuals was

HIPAA Omnibus Rule Compliance: Is Your Practice Ready?

On January 17, 2013, the United States Department of Health and Human Services released a Final Rule, commonly known as the “HIPAA Omnibus Rule,” which included significant changes to the HIPAA compliance requirements for healthcare covered entities, including private practice rehabilitation and medical providers. The compliance

Contributed by Lee Kim, Esq.

The CERT program is having a free all-day event tomorrow (June 26, 2013) in Pittsburgh, PA on security incident management for health information exchanges.  This event is underwritten by the US Department of Health and Human Services.

Registration is free, but required.  http://www.cert.org/cybersecurity-hie/.  The event will be live and

Contributed by Lee Kim

412.594.3915

Healtheway was previously known as the National Helath Information Network.  It is a non-profit public-private partnership and has announced today its nine founding members.  These members include the American Medical Association, Epic, Kaiser Permanente, New York eHealth Collaborative, among others. 

For the full press release, please see http://finance.yahoo.com/news/healtheway-announces-founding-members-groundbreaking-110000367.html.

Lee Kim will be speaking at the Government Health IT Conference on June 11-12, 2013 in Washington, D.C. addressing changes due to the Omnibus Privacy Rule.  Privacy and security requirements for health data can be complex and intimidating. HIPAA and HITECH, and now the January 2013 release of the HIPAA Omnibus Rule have a very practical

Lee Kim will be giving a webinar on negotiating electronic health record agreements on Thursday, June 20, 2013.

EHR’s are increasingly outsourced services provided by specialty vendors who can take advantage of economics of scale and concentrated expertise. But this means that mission-critical health care functions are more dependent on complex systems the provider does not