The Office of CIvil Rights has released a memo outlining an individual’s right to access their medical information. The memo explains that though the right to see and obtain a copy of one’s medical record has always been permitted by the HIPAA Privacy Rule, “many consumers face barriers to getting their health information – and
HIPAA, HIT, and EHR
United States will Allocate Spectrum for Medical Area Body Networks
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
Contributed by Lee Kim, Esq.
412.594.3915
The Federal Communications Commission (FCC) announced that it will adopt rules to enable Medical Body Area Networks (MBANs)). MBANs are low-power wideband networks. MBAN technology comprises multiple body-worn sensors that transmit patient data to a control device for actively monitoring a patient’s health, such as vital signs, blood glucose…
CMS Publishes Corrections to Meaningful Use Stage 2 Proposed Rule
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
The Centers for Medicare and Medicaid Services has published corrections to its Meaningful Use Stage 2 proposed rule in the Federal Register. “This document corrects technical errors and typographical errors in the proposed rule entitled ‘Medicare and Medicaid Programs; Electronic Health Record Incentive Program—Stage 2’ which appeared in the March 7, 2012, Federal Register.”
The…
HHS Settlement with Physician Practice
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
Contributed by: Lee Kim, Esq.
412.594.3915
The HHS Office for Civil Rights (OCR) received a report that a physician practice, Phoenix Cardiac Surgery (PCS), was posting clinical and surgical appointments for their patients on an Internet-based calendar that was publicly accessible. OCR investigated and found that PCS had implemented few policies and procedures to…
Data Breach of 24,000 Medicaid Claims by Hackers
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
Contributed by Lee Kim, Esq.
412.594.3915
Representatives from the Utah Department of Health (UDOH) and the Utah Department of Technology Services (DTS) announced details of a data breach by hackers involving 24,000 Medicaid claims. Information which may have been compromised included names, addresses, social security numbers, birth dates, and procedure codes according to the…
ONC Mobile Devices Roundtable
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
Contributed by: Lee Kim, Esq.
412.594.3915
Previously, we commented on the ONC Mobile Devices Roundtable on March 16, 2012. Now, the video and other materials are available online. These materials may be accessed via the following link: http://healthit.hhs.gov/portal/server.pt/community/healthit_hhs_gov__mobile_devices_roundtable/3815?q=mobiledevicesroundtable#archive. (ONC has a Youtube video channel. This link leads to that for the video content.)
Thoughts on the ONC Health IT Mobile Devices Roundtable: Safeguarding Health Information
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
Contributed by: Lee Kim, Esq.
412.594.3915
The ONC Health IT Mobile Devices roundtable is being aired today, on March 16, 2012, by way of live video webcast at http://www.hhs.gov/live.
Here are my thoughts upon hearing the content (which is certainly instructive and helpful) (and this was submitted to ONC Health IT for public comment):
1.
HHS Settles HIPAA Case with Blue Cross Blue Shield of Tennessee for $1.5 Million
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
Contributed by: Lee Kim, Esq.
412.594.3915
The HITECH Breach Notification Rule requires covered entities to report an impermissible use or disclosure of protected health information, or a “breach,” of 500 individuals or more to HHS and the media. Smaller breaches affecting less than 500 individuals must be reported to the secretary on an annual basis. …
Meaningful Use Stage 2 NPRM
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
Contributed by: Lee Kim, Esq.
412.594.3915
CMS has released the notice of proposed rulemaking for meaningful use stage 2 and has provided an overview fact sheet outlining the differences from stage 1.
Link to NPRM:
http://www.ofr.gov/OFRUpload/OFRData/2012-04443_PI.pdf
Link to fact sheet:
HIPAA Privacy and Security Rule Audits and Enforcement
By Michael Cassidy on
Posted in HIPAA, HIT, and EHR
Contributed by Lee Kim, Esq.
412.594.3915
The HITECH Act mandates HIPAA audit and enforcement. In that vein, the US Department of Health and Human Services Office for Civil Rights (OCR) announced a pilot program to perform audits of covered entities to assess their HIPAA Privacy and Security compliance. The covered entities to be audited include a…