x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Help Me With HIPAA

Donna Grindle and David Sims

In today"s environment of data breaches, identity theft, fraud, and increasing connectivity, HIPAA Privacy and Security rules are a responsibility to your patients and your clients. HIPAA isn"t about compliance, it"s about patient care.

business

All Episodes

36:38

HIPAA Penalties Increasing - Ep 72

Help Me With HIPAA ·

2016/09/23

Did you hear that maximum penalties for HIPAA violations are being adjusted for inflation? It has quietly happened. Here is how. Check out the Federal Register entry from September 6, 2016. If you aren't in to reading yourself, don't worry, you know Donna did it. Well, at least the HIPAA parts. Learn more at: HelpMeWithHIPAA.com/72

en

35:17

OCR small breach investigations increasing - Ep 71

Help Me With HIPAA ·

2016/09/16

OCR recently released another memo concerning compliance enforcement efforts. They say effective August 2016, they have started an initiative to more widely investigate breaches involving under 500 patients. That means that OCR small breach investigations will begin happening immediately. In the past, the policy had been to investigate all breaches over 500 patients but not under. More information at HelpMeWithHIPAA.com/71

en

37:03

Insider Threats: Do you know who your employees are?...

Help Me With HIPAA ·

2016/09/09

OCR published a memo on Aug 1, 2016. The title is "Do you know who your employees are?". It is a great reminder about insider threats that we should all worry about regularly. Quoted directly from the memo. ============================ Although all insider threats are not malicious or intentional, the effect of these threats can be damaging to a Covered Entity and Business Associate and have a negative impact on the confidentiality, integrity, and availability of its ePHI. According to a survey

en

44:00

OCR 2016 settlements keep coming - Ep 69

Help Me With HIPAA ·

2016/09/02

So far in 2016 there have been 10 resolution agreements announced. One more and this year will equal the number of agreements in all of 2015 & 2014! The latest two also include the largest one announced yet - $5.5m with Advocate Health. Before that though was The University of Mississippi Medical Center - Ole Missto those of us in the SEC world. It wasn't something to "shake a stick at" with a$2.75m resolution amount. The total amount for those 10 announcements so far in 2016 = $20,314,800 Of course

en

47:01

OCR Desk Audit Details - Ep 68

Help Me With HIPAA ·

2016/08/26

The OCR audits have begun. On Wednesday, July 13, audit selected CEs where invited to a webinar. OCR staff walked through the processes they can expect for the audit and expectations for their participation. The OCR published information from the webinar so we had to check it out and share what we learned with you guys. For more details visit HelpMeWithHIPAA.com/68

en

36:13

Pokemon Go and HIPAA Breaches - Ep 67

Help Me With HIPAA ·

2016/08/19

Say it ain't so! Pokemon and a HIPAA breach really? REALLY! Creatures are showing up in offices and hospitals just like everywhere else. The concept of keeping people active and engaged with their surroundings while playing a video game seems like a great idea from a healthcare standpoint. And then you actually do a risk assessment of it - this is where the wheels fall off that good idea train. Get more details as HelpMeWithHIPAA.com/67

en

39:23

Healthcare Hack: PHI For Sell On The DarkNet - Ep 66

Help Me With HIPAA ·

2016/08/12

We first talked about this in Ep 62. Darknet sale of healthcare records. Now, more information is coming out and it gets more unfortunate for patients every time we read more. Deep Dot Web broke the news: https://www.deepdotweb.com/2016/06/26/655000-healthcare-records-patients-being-sold/ We picked it up on Data Breaches.net because they were trying to figure out who the entities actually were in each case: https://www.databreaches.net/damn-anyone-know-what-facilities-these-are/ Get more info at

en

44:40

OCR resolution agreement - OHSU - EP 65

Help Me With HIPAA ·

2016/08/05

What happened? March 23, 2013 Oregon Health & Science University notified HHS of a breach due to a stolen unencrypted laptop. May 1, 2013 OCR notifies them they are investigating the incident July 28, 2013 Oregon Health & Science University notified HHS of another breach resulting from storing ePHI at an internet-based service provider without a business associate agreement November 8, 2013 OCR notifies them they are investigating the new incident July 18, 2016 settlement announced for $2.7 million

en

37:24

Security Incident Response Plan - Ep 64

Help Me With HIPAA ·

2016/07/29

OCR recently sent out a message on their listserv asking if your CE or BA was ready for an incident. We have been discussing security incidents a lot lately so it is nice that OCR has brought it up. Because we have seen various Incident response reports recently, so we were working on an episode anyway. So this episode is a review of Security Incident Response Plan development. Let's first be clear, this isn't just about HIPAA. We also have been reviewing the Economist Intelligence Unit 2013 (EIU)

en

41:37

Medical Device Security - Ep 63

Help Me With HIPAA ·

2016/07/22

There has been a lot of news and industry discussions about Medical Device security. Medical Devices are just like a computer, so they also need security to protect the information on them. For more go to HelpMeWithHIPAA.com/63

en

40:08

Business Associate Breaches In The News - Ep 62

Help Me With HIPAA ·

2016/07/15

A business associate is getting this OCR resolution, $650,000 and a two-year settlement. CHCS in Philadelphia is a BA to 6 skilled nursing clinics in the Philadelphia area. Entities like this do the business part of healthcare and the other clinics don’t have to worry about it. An unencrypted iPhone that wasn’t password protected had PHI on it. Patterson Dental Supply Inc. helps manage dental practice information for various providers. One of the clinics they help service is Massachusetts

en

33:10

Healthcare Data Breach Study - Ep 61

Help Me With HIPAA ·

2016/07/08

Since 2010, ID Experts has sponsored this Ponemon Institute study which has been tracking data breach trends of patient data at healthcare organizations. The annual economic impact of a data breach has risen over the past six years, as has the frequency of data breaches. Criminal attacks and internal threats are the leading cause of healthcare breaches. Evolving cyber attack threats such as ransomware and malware are of primary concern for 2016. At the same time, internal issues such as employee

en

30:31

HIPAA Rules In A Crisis - Ep 60

Help Me With HIPAA ·

2016/07/01

As always, during times of crisis and chaos things do become confused and incorrect statements are made. It is a normal occurrence in troubling situations. But, we need to address it specifically to clear up a few points. There was no "special waiver from the White House". There was no need for one at all. People, even in a crisis, should not be invoking HIPAA over caring for the patient properly. The hospitals talked about implementing their crisis plan - why wasn't HIPAA addressed in the plan. It

en

42:14

HIPAA, HHS, OCR, and PHI - Ep 59

Help Me With HIPAA ·

2016/06/24

Today’s podcast is a little different from our normal ones. We are covering a wide variety of subjects involving HIPAA, OCR, HHS, and PHI rather than one specific topic. For more go to HelpMeWithHIPAA.com/59

en

35:41

Preventing Ransomware - Ep 58

Help Me With HIPAA ·

2016/06/17

Preventing ransomware is a major concern for every business today. If not, it should be. This episode covers understanding ransomware and methods for preventing it. Is ransomware a phi breach? April record number of cases and not slowing down 8 hospitals (more by the time we record) already hit. Training and vigilance is best defense Ransomware attacks continue to evolve to be "smarter" For more see HelpMeWithHIPAA.com/58

en

32:49

HIPAA Policy and Procedure Templates - Ep 57

Help Me With HIPAA ·

2016/06/10

HIPAA policy and procedure templates seem to be a panacea to many people who are just trying to meet the standards and move on. However, these are not the droids you seek! Templates can be the basis for what you need to do but they shouldn't be the solution to the written policy and procedure requirements under HIPAA. See HelpMeWithHIPAA.com/57

en

47:26

Malware Protection under HIPAA - Ep 56

Help Me With HIPAA ·

2016/06/03

Two reasons for today's topic: A question we received from a listener about understanding antivirus software and a news report about a malware scan that interrupted a medical procedure. Between those two cases it felt like it was time to discuss malware protection under HIPAA. Suzie from Savannah: I would like to have a podcast or a quick answer to the different between anti-virus software releases and anti-virus definitions being up-to-date. I understand the AV definitions up to date but a little

en

46:38

New HIPAA Privacy Rules Guidance - Ep 55

Help Me With HIPAA ·

2016/05/27

We always look at the security rule aspects of HIPAA because they deal with the easier parts for people to deal with when it comes to lowering their risk, but today we are diving into some privacy rule guidelines, because there is new HIPAA privacy guidance that has just been published. Get more info at HelpMeWithHIPAA.com/55

en

37:57

HIPAA Access Log Audits - Ep 54

Help Me With HIPAA ·

2016/05/20

Recently, we ended up in several discussions about HIPAA access logs and what they really require with our clients. As per usual, any topic that comes up multiple times in my “real job” becomes a discussion for HMWH. So, today we are talking about HIPAA access logs to attempt to clear up some confusion we have encountered. There are multiple types of HIPAA access logs being created in most environments and you should be dealing with pretty much all of them in some manner. Get more at

en

41:50

What does a data breach cost? - Ep 53

Help Me With HIPAA ·

2016/05/13

We talked about OCR audits recently because they are in the news. The audit protocol is a perfect guide for developing and maintaining your HIPAA compliance programs. In fact, the audits have been a hot topic in the industry this month. However, the fact that only 200 audits will take place really means the audit protocol is more important as a guide for what your program should look like in the event you have a breach or complaint investigation. Statistically, you are much more likely to need it

en

555 results

Similar Podcasts

TaxTalent.com The Golden Rule Podcast

Adam Golden

TaxTalent.com Podcast

Tony Santiago

Handelsblatt Crime - spannende Streitfälle der deutschen Wirtschaft

Ina Karabasz, Solveig Gode, Sönke Iwersen

Deffner und Zschäpitz – Der Wirtschafts-Talk von WELT

WELT

Black Box - La scatola nera della finanza

Guido Brera e Gian Luca Comandini -...