Q: I’m a benefits administrator, and I got a call from human resources about an email she received from an employee about a procedure performed by her physician that was not covered by her insurance. Can I discuss the case with human resources? Or should I talk directly to the employee?
Hospital mergers and acquisitions remain the trend, and many hospital systems and other healthcare organizations cover multiple states, so understanding and keeping track of different state privacy laws can get complicated.
In its latest cybersecurity newsletter, OCR highlights two security threats that are targeting healthcare: advanced persistent threats (APT) and zero-day exploits.
Q: An investigator from the state health department called the clinic where I work and asked for health records to collect vaccination data for a public health project. Is it a HIPAA violation to share that data?
Gaps in mobile security remain a threat to your protected health information and leave you vulnerable to HIPAA violations, so train and, if necessary, restrain employees to reduce the risk.