The HIPAA Omnibus Rule, which includes modifications to the privacy and security rules, is in full effect now. And guess what? There's no reason to be terrified.
You hear it over and over again. Covered Entity (CE) A failed to produce an ongoing risk assessment for HIPAA security compliance. CE B had an incomplete risk analysis, leading to a failure to recognize security weaknesses and vulnerabilities. And in come the fines.
