Welcome to the brave, not-so-new world of compliance and cybersecurity! News of cybercrime seems to be constantly in the headlines, and healthcare is one of the key industries being targeted.
It’s the age-old tale in healthcare: Your organization needs more resources, but leadership simply isn’t interested in helping out. “This has been a challenge since the pre-HIPAA days,” says Kate Borten, CISSP, CISM, HCISPP, founder of The Marblehead Group in Marblehead, Massachusetts. “It’s always been a challenge.”
Q: What are the encryption requirements when using Google Drive™, Dropbox®, or other information-storing applications? How do we ensure HIPAA compliance when using them?
In the weeks leading up to his departure from office, former President Donald Trump signed H.R. 7898 into law, amending the HITECH Act to require the Health and Human Services secretary to consider certain recognized security practices of covered entities (CE) and business associates (BA) when taking enforcement actions.
Q: Is it permissible to store paper patient records in a public storage unit? If so, do the storage units need to use specific safeguards to be HIPAA compliant?