Blog
-

Business Associate Agreements Explained: What is a BAA and When Do You Need One?
1. What is a Business Associate Agreement? “A business associate contract, or business associate agreement, is a written arrangement that specifies each party’s responsibilities when…
-

Address These 6 Things in Your Vendor Contract to Reduce Risk
Before you outsource any of your organization’s functions to a third party, you need to do your research. Will the vendor handle PHI on behalf…
-

How Should I Conduct Due Diligence for Vendors and Business Associates?
In the last blog, you used a Business Associate Decision Tree to find if your vendors are business associates (BAs) under HIPAA. But good vendor…
-

How to Know if Your Vendor is a Business Associate Under HIPAA (Decision Tree Included)
It’s virtually impossible to do everything in house, which is why most healthcare organizations—and most organizations in general—outsource critical functions. After all, there are many…
-

8 Common Questions About HIPAA Privacy Safeguards
In the last post, we saw how the HIPAA Security Rule’s administrative, physical, and technical safeguards help defend your organization against the hydra of security…
-

9 Q&As That Explain HIPAA Security Rule Safeguards
Healthcare security is a hydra. Just when you thought you’d taken care of one security crisis, another arises to take a bite. How is a…
-

5 Key Questions About HIPAA Violations, Fines, and Penalties
Updated May 28, 2019 Thousands of patient records breached. Millions of dollars in fines following nightmarish lawsuits. The news is full of harrowing stories of…
-

7 Crucial Questions About HIPAA Authorizations
Getting patient authorization can feel like a hurdle in your daily workflow. However, it’s key to maintaining patients’ right to their private medical information. With…
-

How to Write a Breach Notification Letter
After a breach, one of your top priorities is to mail a breach notification letter to everyone whose protected health information (PHI) was compromised. But…
-

HIPAA Breach Notification: Who, When, and How
You already know that the HIPAA Breach Notification Rule requires you to notify all individuals whose protected health information (PHI) is compromised in a breach.…