Critical Access Hospital Compliance Plan

Is there anything particularly special about a Critical Access Hospital Compliance Plan? Not really; the same Office of Inspector General Guidance for Hospital Compliance Plans applies to critical access hospitals…

Continue Reading

What is a Corporate Integrity Agreement?

It seems these days the Office of Inspector General (OIG) of the Health and Human Services (HHS) Department is always busy with settlements or enforcements with healthcare providers. When the…

Continue Reading

Risk Assessment for a Breach of PHI

Conducting a Risk Assessment for a Breach of Protected Health Information (PHI) is a critical step for healthcare organizations under HIPAA regulations. Prompted by any unauthorized disclosure of PHI, this…

Continue Reading

HIPAA Encryption – Required or Not?

Does HIPAA require encryption? Well … encryption is not yet required to be HIPAA-compliant, but it is recommended. You must ensure that your ePHI (electronic Protected Health Information) is protected…

Continue Reading