In June 2018, the state of California passed the California Consumer Privacy Act of 2018 (CaCPA), which has implications for healthcare professionals doing business in California, but with other states proposing similar bills, it’s worth taking a look to see what these privacy laws mean for HIPAA compliance and privacy more broadly.
The American Medical Collection Agency recently began notifying its clients of a hack that exposed personal and billing data of its clients, including approximately 11.9 million Quest Diagnostic patients and 7.7 million LabCorp patients.
Q: I am a college student who had to miss three days of classes because I was ill. One of my professors needed proof that I was too ill to attend class. When I asked the health center for a note, they said it would be a HIPAA violation to provide any details about my illness. Were they right?
Put CMS’ proposed changes in perspective to see the bigger picture. Comments are due June 24, so hospitals will need to conduct a careful analysis to determine the impact of the proposed changes and submit specific feedback.
HIPAA professionals all work to prevent their facilities from getting fined by OCR for violations of HIPAA’s Privacy, Security, and Breach Notification rules, but you need to stay up to date on what those penalties could be and where OCR stands on enforcement.