Although HIPAA laws do not specify any time frame on updating policies and procedures, OCR has expectations. Here are three recent settlements where OCR has included mandates to update policies and procedures. You can apply some of these lessons in your organization.
If your organization is part of a Medicare accountable care organization (ACO), changes may be on the horizon. CMS is proposing changes to the program that would require organizations to take on more financial risk and is giving it a new name, “Pathways to Success.”
Q: Our coding team is currently debating how to report acute tubular necrosis (ATN) in ICD-10-CM for a patient after a renal transplant. Can you provide any guidance?
The Office of Civil Rights (OCR) offered considerations to healthcare organizations for securing electronic devices and media in its August Cybersecurity Newsletter.
Q: I work at the front desk at a clinic. My neighbor is one of our patients, and recently he asked if I could see when some test results would be available. Since I already had access to his records, is it a HIPAA violation to fulfill his request?