Q.As part of its fundraising effort, Hybrid Entity's cancer center wants to send a patient list (demographic information only) to Hybrid's development office, which is not designated as a healthcare component of Hybrid. Is this permissible?
It may not be the proverbial keys to the kingdom, but OCR's recently published audit protocol for its current privacy and security audits gives healthcare organizations an inside look at the inspection process.
A compliance officer is responsible for providing leadership for a healthcare organization's compliance program, but this is not a job a compliance officer must do alone.
