(Journal of Healthcare Information Management – (JHIM) – Spring 2013 – Used by permission from HIMSS). We should all know by now that the Office for Civil Rights (OCR) has been mandated to audit all HIPAA Covered Entities (CEs) and Business Associates (BAs), and we now know the main ingredients of the audits, the protocols, which are subject to change over time based on audit results. All CEs and BAs should begin a process now to prepare for an OCR audit based on the most current protocols. Why? Because once the OCR notifies you that your organization will be audited, you only have a couple of weeks to prepare.
The HITECH Omnibus final rule -“Fall” for IT
(Journal of Healthcare Information Management – (JHIM) –Fall 2012 – Used by permission from HIMSS). See you in September – That was a great song, first done by the Tempos in 1959 and then by the Happenings in 1966. So let’s use it as the theme for the current estimated timing for the publication of the HITECH Omnibus final rule. Of course, it could also be “Home for the Holidays”.
Mobile Devices Are Here to Stay, But Challenges Remain
(Journal of Healthcare Information Management – (JHIM) – Summer 2012 – Used by permission from HIMSS). “The use of portable devices, especially the iPhone and iPad are turning physicians into iDocs. These consumer tools are moving into the healthcare environment at a break neck speed! We have seen increased usability. That is good. But, we also have seen increased security risks. That is bad”.
How to Prepare for a HIPAA – HITECH Audit
(Journal of Healthcare Information Management – (JHIM) – Spring 2012 – Used by permission from HIMSS). Covered entities (CEs) and business associates (BAs) can now clearly see the “HIPAA police” up ahead on the “side of the road”.
(Journal of Healthcare Information Management – (JHIM) – Winter 2012 – Used by permission from HIMSS) It’s a numbers game when it comes to information security risk management. The bigger the numbers the harder it is to manage the risk of unauthorized access to protected health information.
Aggregate Results of HIPAA 411 Policy and Procedure Surveys of Covered Entities, Business Associates and Consultants and information on access to detailed analysis of the results are now available. Thanks to all who have responded to the surveys.
Consultants: Keep the anonymous HIPAA and HITECH policy and procedure surveys coming! So far we have a number of completed surveys that represent hundreds of providers and health plans.