Q: Is there a sample risk analysis about how an enterprise or clinic might evaluate and determine if data-at-rest protection through encryption is reasonable and appropriate as defined in the HIPAA Security Rule?
Coding tells a patient's story, based on the narrative the physician provides in his or her documentation. Accurately painting a picture of the patient's severity of illness (SOI) and risk of mortality (ROM) is essential for good patient care, and it is becoming increasingly important for quality measures and payment.
Even organizations with sound policies, procedures, training, and safeguards can experience a breach. When?not if?a breach occurs, traditional insurance may not be enough to cover the damages. Ensuring that your organization has adopted the appropriate cyber insurance can be valuable in the event of a breach.
The Office for Civil Rights (OCR) announced December 8, 2014, that it fined an Alaska behavioral health service $150,000 for potential HIPAA violations. OCR entered into a resolution agreement with Anchorage Community Mental Health Services (ACMHS), a nonprofit behavioral healthcare service, per the announcement (see www.hhs.gov/ocr/privacy/hipaa/enforcement/examples/acmhs/amchs-capsettle...).
Mental health disorders are common in the United States, with an estimated 19% of Americans 18 or older suffering from a diagnosable mental disorder, according to a 2012 survey from the National Institute of Mental Health (NIMH).
