HIPAA requires you to keep unauthorized people from viewing protected health information (PHI). Even when you’re disposing of unneeded PHI, you must still keep the data secure. According to the Department of Health and Human Services (HHS), “covered entities are not...
The HIPAA Privacy Rule requires you to verify the identity and authority of a person requesting protected health information (PHI) unless the person is already known by your organization. The rule is flexible about how you get verification. However, there are basic...
When law enforcement enters your organization demanding patient information, it can be intimidating. You know that the Health Insurance Portability and Accountability Act (HIPAA) requires you to keep patients’ protected health information (PHI) private. Ordinarily,...
If you know anything about HIPAA, it’s that it requires Protected Health Information (PHI) to be kept private and secure. But ensuring HIPAA compliance relies on you—and your staff—knowing what exactly qualifies as PHI. Some team members tend to...
The HIPAA business associate agreement (BAA) lays out your business associate’s obligations to protect your data. The previous blog gave an overview of BAAs. Let’s hone in on six important BAA provisions: Permissible uses and disclosures of protected...