Q Our authorization form for release of information requires patients to sign separate lines to authorize release of sensitive information, such as sexually transmitted diseases, substance abuse, and genetic information. We understand that very few other covered entities do this. Is this a legal requirement? And if so, may we change our form to state that all information will be released unless the patient indicates otherwise?
Business associates (BA) may not be the target of upcoming HIPAA compliance audits, but failure to comply with the regulations could be very costly, says Tom Dumez, CHP.
Breaches are expensive, and the price tag increases when preparation and formal documentation are lacking. Identity Theft Guard Solutions, LLC, in Portland, OR, doing business as ID Experts, has introduced a do-it-yourself breach assessment, monitoring, and investigation tool called RADAR™ that helps reduce costs associated with lack of preparation, breach investigation, notification, and documentation.
September has always been synonymous with students returning to the classroom. While that may not be reason enough to review the HIPAA Privacy Rule, a more compelling reason to dust off the HIPAA education materials might be the government's increase in enforcement efforts.
Just three weeks before a devastating tornado roared through Joplin, MO, St. John's Regional Medical Center transitioned to an electronic health record (EHR) system that it credits with aiding its disaster recovery.
