Hospitals can make better use of their electronic health record (EHR) system’s audit functions not only to guard patient privacy but also to help prevent healthcare fraud, according to a new HHS Office of Inspector General (OIG) report.
Although the one-year anniversary that will mark the release of the HIPAA Omnibus Rule has come and gone, many business associates (BA) are either confused about their obligations under HIPAA or may not realize they even have any obligations.
Q . Are HIPAA policies and training required regardless of the number of employees at a facility? For example, must a three-provider clinic provide HIPAA training?
Q. Is an authorization required when releasing HIV testing results/information via a health information exchange? If not, what other state/federal regulation may govern sensitive information related to HIV test results or treatment?