<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!-- SwishCommand noindex -->
<rss version="2.0">
<channel>
  <title>ComplianceHome: HIPAA Resources</title>
  <link>http://www.compliancehome.com/</link>
  <description>ComplianceHome is one of the Web's largest library of resources for compliance management of HIPAA, SOX, FISMA, GLBA, FDA, FFIEC, Basel II, OSHA and ISO 27002/17799. Visit our directories which are the best source on White papers, related news articles, resources on the web, training, webinars, conferences, rules &amp; regulation overview, ask the expert, job and search on vendors, solutions &amp; products.</description>
<image>
  <url>http://www.compliancehome.com/images/rsslogo.gif</url>
  <title>ComplianceHome</title>
  <link>http://www.compliancehome.com/</link>
</image>
  <language>en-us</language>
  <item>
    <title>Email Security and Archiving - Clearer in the Cloud</title>
    <pubDate>Mon, 29 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17986.html</link>
    <description>The time is NOW for businesses and organizations of all sizes to implement cloud computing solutions for email security and archiving. Cloud computing solutions are more effective than traditional, on-premise solutions and at a fraction of the cost and IT resource requirements. Listen to this live TechRepublic Webcast, featuring moderator Steve Kovsky and featuring special guests Michael Osterman, President of Osterman Research and Adam Swidler with Google. They present findings, regarding the latest research comparing cloud solutions with on-premise solutions.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17986.html</guid>
  </item>
  <item>
    <title>Additional Details on HIPAA Security Compliance</title>
    <pubDate>Mon, 29 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17984.html</link>
    <description>Health care organizations with more medical information, including patient records, being converted into electronic formats, find themselves increasingly vulnerable to attacks. The challenge of securing information and maintaining strict levels of patient confidentiality has become increasingly difficult since Web-based systems are widely used to provide easy and ubiquitous access to authorized users.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17984.html</guid>
  </item>
  <item>
    <title>Valuable Tips to Assist Insurers Guarantee Effective Enterprise-wide Data Searches</title>
    <pubDate>Fri, 26 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17982.html</link>
    <description>DocFinity every insurer will recognize the value of digital storage and workflow automation for business. Not only does it accelerate processing speeds and improve service; it makes the burden of regulatory compliance significantly easier. In order to meet regulatory standards, efficient data collection across the enterprise is critical.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17982.html</guid>
  </item>
  <item>
    <title>PCI - It's Not Quite Everywhere It Should Be</title>
    <pubDate>Fri, 26 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17981.html</link>
    <description>Learn about critical technologies that can assist your PCI compliance efforts. We will discuss how to: Protect critical data from leaving your enterprise through malicious hackers and/or employee mistakes Go beyond intrusion detection and prevention to a positive, proactive, security model that protects against new email and web-borne attacks Safely enable remote employees, partners, contractors and other third parties to authenticate and access pertinent information  Implement security measures that ensure simultaneous compliance with PCI, SOX, GLBA, HIPAA and other privacy and data protection regulations</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17981.html</guid>
  </item>
  <item>
    <title>Ensuring Proper Access Controls on Regulatory Requirements</title>
    <pubDate>Fri, 26 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17970.html</link>
    <description>Many industries are undergoing sweeping changes due to increased government regulations that are having a dramatic impact on their business processes, as well as their IT infrastructure. One of the most important regulations in health care is HIPAA, because of its goal of ensuring security and privacy of protected health information (PHI).</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17970.html</guid>
  </item>
  <item>
    <title>List of Testing Problems and New HIPAA Data Requirements Posted by CMS</title>
    <pubDate>Fri, 26 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17969.html</link>
    <description>A new information regarding Medicare transactions and code set compliance has been posted by the Centers for Medicare and Medicaid Services (CMS) As HIPAAdvisory reported, a graph on the CMS site shows that from Nov. 10-14, the volume of Medicare electronic claims received in the HIPAA format was 48.44 percent. A Top 10 list offers guidance in response to submitter claim testing problems. The list covers technical and non-technical issues Medicare contractors have encountered that are preventing submitters from moving into production on the 837 claim. A second list covers the new required data elements on the HIPAA X12N 837 institutional and professional health care claim forms, which were not previously required on the electronic Part A (UB92) formats and Medicare Part B (National Standard Format). As of Oct. 1, all CMS transmittals are no longer broken into groups such as Part A, Carrier, etc.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17969.html</guid>
  </item>
  <item>
    <title>Final Order In CVS Caremark Data Security Case Issued by FTC</title>
    <pubDate>Fri, 26 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17968.html</link>
    <description>A final consent order settling claims that CVS Caremark violated customers' privacy and the Health Information Portability and Accountability Act (HIPAA) when it failed to dispose of records properly last year is approved by the Federal Trade Commission.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17968.html</guid>
  </item>
  <item>
    <title>Commissioner Tim Sutton wants Health Department to provide more flu data</title>
    <pubDate>Sun, 21 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17956.html</link>
    <description>Tim Sutton, County Commissioner wants the ethnic breakdown of the six confirmed cases of the H1N1 flu virus in Alamance County and says County Health Director Barry Bass should provide it. Bass said he  doesn't have the data.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17956.html</guid>
  </item>
  <item>
    <title>A Simple Approach to Email Compliance</title>
    <pubDate>Wed, 17 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17934.html</link>
    <description>Compliance, GRC, Policy Management, Risk mitigation, IT Governance, DLP, HIPAA, SOX, PCI-DSS...the new language of security can be confusing at best, and both management and IT staff are seeking answers. Where can we find out about the rules that apply to us? Are we at risk for compliance-related penalties? Are the legal and accounting departments on top of this? One thing is certain - with over 90% of corporate communication sent though email, it is the single most critical point of failure in your security landscape. While the web has become a larger focus recently, the fact is that email security risks continue to grow worldwide, year after year. And the issues have evolved beyond spam to include acceptable use policies, malware and phishing attacks from the outside, sensitive information being forwarded to unauthorized recipients; the list goes on.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17934.html</guid>
  </item>
  <item>
    <title>With an Increase in EHR Adoption Medical Identity Theft Concerns Grow</title>
    <pubDate>Mon, 15 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17933.html</link>
    <description>A 2007 federal report on crime -- the most recent year for which data are available -- found that more than 250,000 U.S. residents annually are victims of medical identity theft, the New York Times reports. Pam Dixon -- executive director of World Privacy Forum and author of a 2006 medical identity theft report -- said that number likely has increased since 2007 because more people are using electronic health records that do not have adequate safeguards.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17933.html</guid>
  </item>
  <item>
    <title>CMS Urged by AHA  to Seek Provider Input on HIPAA NPI Process</title>
    <pubDate>Mon, 15 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17927.html</link>
    <description>The American Hospital Association (AHA) in June 22 letter, urged the Centers for Medicare &amp; Medicaid Services (CMS) to seek ongoing input from health care providers as it develops and implements the enumeration process for the HIPAA National Provider Identifier (NPI) standard, not solely after the process has been developed, Phoenix Health System's HIPAAdvisory reported.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17927.html</guid>
  </item>
  <item>
    <title>City expected to spend $100 million on swine flu response</title>
    <pubDate>Mon, 15 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17920.html</link>
    <description>As the swine flu death toll in New York rose to 15, health and emergency officials said Thursday the city will spend an estimated $100 million on its ongoing response to the outbreak.At a City Council hearing, the officials said $10 million has been spent already since the outbreak started in Queens in April. Dr. Thomas Farley, who has served as the city's health commissioner since Monday, said his agency alone has spent at least $4 million on a response to the new viral strain.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17920.html</guid>
  </item>
  <item>
    <title>GRC tools coming to the cloud</title>
    <pubDate>Mon, 15 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17919.html</link>
    <description>CA's Tom McHale, the vice president of product management for GRC Manager, CA's entry in the governance, risk and compliance market, when looks at cloud computing vendors, he sees nothing but nails waiting for his GRC tool. It's not that McHale sees the cloud as inherently at odds with an enterprise's GRC needs. In fact, he ticks off lots of reasons why the cloud is already prepared for many heavily regulated enterprises.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17919.html</guid>
  </item>
  <item>
    <title>The watchers watched by the software</title>
    <pubDate>Tue, 09 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17906.html</link>
    <description>Its a harsh reality, but in this economic environment there are layoffs and companies need to make sure employees that are let go cant access networks and files after they walk out the door. Agoura Hills, Calif.-based Symark is a company supplying software that enables IT administrators to see who accesses what files, giving them the ability to shut individuals out of systems with just a couple of clicks, says John Mutch, CEO at Symark.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17906.html</guid>
  </item>
  <item>
    <title>Serial ATA being used by HIPAA Compliance</title>
    <pubDate>Tue, 09 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17903.html</link>
    <description>HIPAA compliance is much more than a mandate to digitize medical files in standard, auditable and readily accessible formats. It is also much more than centralized software combined with digital imaging and document input solutions. HIPAA compliance, at its core, is secured by the libraries of storage that will serve and archive billions of files. What do government regulations require from health care IT professionals? What are the best solutions available for meeting those requirements in times of constrained budgets and increasing business requirements? More specifically, which technologies are best suited to help IT professionals meet those requirements while maintaining or improving committed service levels?</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17903.html</guid>
  </item>
  <item>
    <title>A Resignation by Knox County employee who took shotgun</title>
    <pubDate>Tue, 09 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17900.html</link>
    <description>The Knox County employee disciplined for taking a shotgun into his workplace resigned today because he couldn't go two months without pay. Rodney Rockett, the county's greenwaste coordinator, notified officials in writing and sent at least a portion of his statement to the News Sentinel via e-mail.The county has declined to reveal conditions set on Rockett for his continued employment, citing a federal medical privacy law, but Rockett wrote that he had been suspended for 60 calendar days without pay. After a request to drop that condition was rebuffed, Rockett resigned.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17900.html</guid>
  </item>
  <item>
    <title>An Urge from AHIMA to Providers to Establish Industry-Wide Sanctions in Response to Breaches Involving PHI</title>
    <pubDate>Tue, 09 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17899.html</link>
    <description>A  message of seriousness and responsibility can be sent by Health care providers to employees and gain public confidence by developing and applying more consistent enforcement policies in response to breach events involving protected health information (PHI), according to the American Health Information Management Association (AHIMA). Although the Health Insurance Portability and Accountability Act of 1996 (HIPAA) privacy and security rules establish a national floor for confidentiality, covered entities have been left to develop their own internal enforcement and sanctioning approaches to breaches. As a result, health care providers have shown a wide range of responses to breaches, with sanctions ranging from gentle reminders to termination of employment. Even within facilities, physicians caught snooping in medical records have simply received counseling, while rank-and-file employees have been fired.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17899.html</guid>
  </item>
  <item>
    <title>Important Privacy Provisions Affecting Psychiatrists Included in Stimulus Bill</title>
    <pubDate>Wed, 03 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17883.html</link>
    <description>Psychiatrists failed to get privacy protection for an expanded version of their psychotherapy notes in the stimulus bill Congress passed last February. But the American Recovery and Reinvestment Act (ARRA) did authorize a study on the issue and made other pro-privacy improvements to the Health Insurance Portability and Accountability Act of 1996 (HIPAA).</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17883.html</guid>
  </item>
  <item>
    <title>Complete HIPAA Solution for Providers Offered by MedLink VPN</title>
    <pubDate>Wed, 03 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17881.html</link>
    <description>A wholly owned subsidiary of Western Media Group Corp.,MedLink VPN Inc.,announced a solution for HIPAA compliance through its tablet PC, electronic health record (EHR), virtual private network (VPN) secure database, MedLink Optical Cards and Secure Health Mail services.The combination of these technologies, when used together, allows doctors, hospitals and medical institutions to securely collect, store, transport and wirelessly share EHRs, according to a company press release.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17881.html</guid>
  </item>
  <item>
    <title>Registration for the Secure Email Evaluation Discovery (SEED) project for the state of Washington Commenced</title>
    <pubDate>Wed, 03 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17879.html</link>
    <description>The Community Health Information Technology Alliance (CHITA) announced the beginning of registration for the Secure Email Evaluation Discovery (SEED) project for the state of Washington, in cooperation with Zix Corporation (ZixCorp). ZixCorp is a global provider of secure e-messaging services. The SEED project is designed to determine the impact of adopting and using secure e-mail in the health care industry, and to help experts assess one of the country's first wide-scale deployment efforts to bring security to confidential e-mail communications. Participants of the project receive a complimentary one-year subscription to ZixMail, a desktop-level secure e-mail service from ZixCorp. This one-year service is being made available to all members of the Washington state health care community. Eligibility is conditioned upon participation in two 10-minute online surveys -- one at first use and the other after six months.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17879.html</guid>
  </item>
  <item>
    <title>NPI Info Online Made Available Online by CMS</title>
    <pubDate>Wed, 03 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17878.html</link>
    <description>Soon health care providers will be able to apply online for the National Provider Identifier (NPI), the Centers for Medicare and Medicaid Services (CMS) announced in a letter to providers. CMS has contracted with Fox Systems Inc. to serve as the NPI Enumerator. Required by HIPAA, the NPI is a standard unique identifier that will replace the different identifiers that health care providers now use for each health plan with which they do business. Hospitals and other providers must obtain an NPI and begin using it for electronic claims and other HIPAA standard transactions by May 23, 2007. In the letter, CMS indicated it will provide up-to-date information about the NPI, including when and how to apply, on the National Plan and Provider Enumeration System Web site. The agency plans to post the letter on its NPI Web site.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17878.html</guid>
  </item>
  <item>
    <title>Provider ID Challenges to be covered under HIMSS Session</title>
    <pubDate>Wed, 03 Jun 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17877.html</link>
    <description>Hospitals and payers have faced many challenges implementing the transactions, privacy and security rules under HIPAA. The next HIPAA hurdle involves the national provider identifier rule, with a May 23, 2007, compliance cut-off date. An educational session at the Healthcare Information and Management Systems Society (HIMSS) next month in San Diego, is designed to explain processes for implementing the rule, and to urge organizations to start that work now.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17877.html</guid>
  </item>
  <item>
    <title>Challenges of EMS job described by Ambulance district director</title>
    <pubDate>Sun, 31 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17860.html</link>
    <description>Changing technology and new ways of doing things is one of the challenges as a member of EMS is Saline County Ambulance District No. 3 Director of Operations Wade Kelling explained.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17860.html</guid>
  </item>
  <item>
    <title>HIPAA rules changed by Stimulus bills HITECH Act</title>
    <pubDate>Sun, 31 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17858.html</link>
    <description>Health care providers and patients who finally got their brains wrapped around the privacy and security requirements of the Health Insurance Portability and Accountability Act, better known as HIPAA, have a new set of rules to learn. Hidden deep within the recently passed federal stimulus bill was the Health Information Technology for Economic and Clinical Health Act, or HITECH Act.Attorney Cori Loomis said the changes make providers of services to health care entities, from software to document destruction and other services, now directly subject to most significant HIPAA requirements.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17858.html</guid>
  </item>
  <item>
    <title>Today, Tomorrow and the Future of HIPAA</title>
    <pubDate>Thu, 28 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17853.html</link>
    <description>The future of health care under HIPAA will mean a single set of information available for all payers; standard coding practices; standard responses from payers; relatively no human intervention needed for billing, remittance, posting, eligibility inquiries and coordination of benefits; and secured data. These were the key points presented by Stanley Nachimson, senior technical advisor for administrative simplification in the Office of HIPAA Standards, CMS, during his keynote address at the e-Pennsylvania Alliance HIPAA Summit in Hershey, Pa. in April.The future of HIPAA also holds that patient medical records will be available (securely) when needed by health care providers, and entities will be able to easily and clearly identify each and every transaction.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17853.html</guid>
  </item>
  <item>
    <title>A close eye kept on cloud security threats by Insurers</title>
    <pubDate>Tue, 26 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17823.html</link>
    <description>Data loss is possible anywhere, including in the networks of cloud computing providers, but the unique challenges there are significant enough that they are getting a special look from insurers. For one, The Hartford has a dedicated insurance offering called CyberChoice that pays off if failure of the IT infrastructure results in liability for loss of personal information, intellectual property and the like. The insurance pays for investigation of the failure and payment of the costs of notifying customers if there is a reportable breach.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17823.html</guid>
  </item>
  <item>
    <title>The Bar on EHNAC Accreditation raised by Navicure</title>
    <pubDate>Tue, 26 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17822.html</link>
    <description>A leading Internet-based medical claims clearinghouse for physician practices, Navicure, announced it has received full re-accreditation from the Electronic Healthcare Network Accreditation Commission (EHNAC) in the Healthcare Network Accreditation Program  Electronic Health Network (HNAP-EHN). Navicure's compliance with industry established standards and HIPAA privacy rule regulations, as well as excellence in health data processing and transactions is indicated by this accreditation. Navicure has been an EHNAC accredited clearinghouse since 2007, but organizations must apply for reaccreditation every two years. The company implemented suggestions from its previous assessment to finish with a score of 99 out of a possible 100.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17822.html</guid>
  </item>
  <item>
    <title>Dumped Documents contain more Medical Facilties</title>
    <pubDate>Thu, 21 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17807.html</link>
    <description>New developments have come forward about which medical facilities were named in the files found dumped in a recycling bin. It's story that has been following since couple of days and more questions were asked and  more answers as to whose personal information could be compromised came ahead. Thousands of files were found in a recycling bin just off Access Road and they are continuing to concern as Chattanooga Police try to find out where they came from and who dumped them.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17807.html</guid>
  </item>
  <item>
    <title>In the Age of HIPAA Life of Children getting improved</title>
    <pubDate>Wed, 20 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17800.html</link>
    <description>Those involved in the health care industry for the last several years have undoubtedly been touched by HIPAA-compliance efforts. When called upon to explain what a privacy officer does, I take into account those outside the health care industry who have stories, questions and skepticism about the federal government's effort to simplify America's health care system. When I joined Children's Medical Center Dallas (Children's) in November 2002, the hospital was facing substantial challenges in the area of HIPAA compliance. As with other providers across the nation, resources were limited, yet the tasks to be completed were formidable.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17800.html</guid>
  </item>
  <item>
    <title>Security is the vital key with medical databases</title>
    <pubDate>Wed, 20 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17799.html</link>
    <description>The need of access to electronic medical records systems is there but must it be tightly regulated.Court records, government records, company financial records -- these days, it's all electronic. Records that used to fill endless shelves and filing cabinets in offices now only fill electronic databases. In medicine, however, the conversion hasn't fully happened yet because of the Health Insurance Portability and Accountability Act (HIPAA).Despite HIPAA, the future is to have patients' medical records stored electronically so both doctors and patients can easily access them. But there are some very dire potential consequences of medical records being stored electronically, not the least of which is that personal medical data could fall into the hands of people who have no right to see it, such as employers or health insurers.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17799.html</guid>
  </item>
  <item>
    <title>Compliancy &amp; Document Management: &quot;The Critical Connection&quot;</title>
    <pubDate>Wed, 20 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17791.html</link>
    <description>View this on-demand Webcast, presented by Doug Brennecke, V.P. Sales, Computhink, and featuring guest speaker Tom von Gunden, chief editor of enterprise content management news and solutions site ECM Connection.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17791.html</guid>
  </item>
  <item>
    <title>Shared lab results permitted by Quest, Microsoft platform</title>
    <pubDate>Wed, 20 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17788.html</link>
    <description>Laboratory testing giant Quest Diagnostics and Microsoft working in collaboration have created an infrastructure allowing patients and doctors to share diagnostic lab test results online. The effort relies on Microsoft HealthVault, a personal health record technology now in use in a variety of settings.The portal, known as Care360, can transfer test results in a HIPAA-compliant format to a protected account when a patient requests them. The account will store past and present lab records.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17788.html</guid>
  </item>
  <item>
    <title>Doctors prepare for ID theft rules</title>
    <pubDate>Mon, 18 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17779.html</link>
    <description>Pediatric Associates' compliance officer C. Rocky Slonaker, MD, breathed a sigh of relief when he heard that his practice would have more time-until Aug. 1- to comply with the Federal Trade Commission's new identity theft prevention rules.The</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17779.html</guid>
  </item>
  <item>
    <title>Public fails to notice aspects of Health Insurance</title>
    <pubDate>Mon, 18 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17769.html</link>
    <description>The greatest contribution of health insurance is the fact that it protects you and your family from the cost of illness or injury. Yet in this time of expensive health care cost and the lack of affordable health insurance plans the above assertion comes into question.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17769.html</guid>
  </item>
  <item>
    <title>Ecora Software introduces an updated version of HIPAA Software</title>
    <pubDate>Mon, 18 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17768.html</link>
    <description>Ecora Software introduced an updated version of its change- and configuration-management software to make HIPAA compliance easier. It also works across a variety of platforms, a recent company press release announced. Ecora's Enterprise Auditor version 3.6.2 has built-in HIPAA reports that map directly to the act's security rules, making it easier to quickly generate reports that can be used to demonstrate that a company is in compliance with the rules that mandate how protected information should be stored, the company stated. This involves tracking changes to the network and devices attached to the network.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17768.html</guid>
  </item>
  <item>
    <title>Compliance, backup, and recovery</title>
    <pubDate>Mon, 18 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17766.html</link>
    <description>With the ever-increasing array of legislative mandates,compliance  presents a burden to management and IT staff alike. If youre in financial services, you are bound by Gramm-Leach-Bliley; in health care, by HIPAA; or if youre a publicly-held corporation, Sarbanes-Oxley. If you process credit card payments, there are PCI-DSS rules to consider. In addition, there are state regulations that transcend the statesuch as Californias SB1386 (California Information Practice Act). Although this is a California state law, it has become a de facto nationwide practice because of its scope. Any company that maintains any information about a resident of California, whether the company is in California or not, must complyand as a result, almost every midsize to large company falls under its purview.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17766.html</guid>
  </item>
  <item>
    <title>Shipley's bill altered to reflect privacy rule</title>
    <pubDate>Thu, 14 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17748.html</link>
    <description>Legislation requiring Tennessee health care providers to release a minor childs medical test results to their parents advanced in the House Judiciary Committee between a daylong clash of wills between the bills opponents and its sponsor  state Rep. Tony Shipley. An amended version of Shipleys bill deferred to the Health Insurance Portability and Accountability Act (HIPAA), a federal law that includes a privacy rule involving minors.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17748.html</guid>
  </item>
  <item>
    <title>HIPAA Privacy And Security Rules For Group Health Plans Changed by HITECH</title>
    <pubDate>Wed, 13 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17744.html</link>
    <description>A portion of the new economic stimulus bill, called the Health Information Technology for Economic and Clinical Health Act (the</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17744.html</guid>
  </item>
  <item>
    <title>Open Records vs. HIPAA to be decided by the Texas Court</title>
    <pubDate>Tue, 12 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17726.html</link>
    <description>Recently there was an argument between state attorneys over whether Texas open records law or HIPAA should prevail when public information requests are made of public hospitals. According to a published newspaper report, other states are watching the Texas case, which is a first of its kind, said Ed Burbach, deputy attorney general for litigation for the Texas Attorney General's Office. Lawyers from Attorney General Greg Abbott's office argued both sides of the case before the 3rd Court of Appeals in Austin. It could take weeks or months for a ruling to come from the court.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17726.html</guid>
  </item>
  <item>
    <title>The Majority of the Security Compliance Are Ready, but Issues Remain</title>
    <pubDate>Tue, 12 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17725.html</link>
    <description>Most of the information technology (IT) professionals involved with HIPAA compliance say they will meet the April 20 Security Rule deadline, but some warn that determining compliance isn't clear-cut, Network World reported.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17725.html</guid>
  </item>
  <item>
    <title>New Period for healthcare networking may be signaled by Conficker worm</title>
    <pubDate>Tue, 12 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17724.html</link>
    <description>The coomon answer to the question, Why would an MRI machine need to be connected to the Internet in the first place? would be that there's some sort of firmware or operating system upgrades that get performed automatically--that the devices can be monitored or inventoried remotely--or that you're performing some other routine network function</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17724.html</guid>
  </item>
  <item>
    <title>I.T. Advances can be fueled by ICD-10</title>
    <pubDate>Tue, 12 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17723.html</link>
    <description>Many views are shown in a survey of 100 health insurers that the transition to the ICD-10 code sets as an opportunity to make strategic improvements in their use of information technologies. Some payers will use the migration as an opportunity to replace legacy core administrative systems. Others with newer systems plan to take advantage of better data analytics afforded through the more detailed code sets to improve business processes. These processes include product development, customer service, and revenue, reimbursement, care, network and risk management functions.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17723.html</guid>
  </item>
  <item>
    <title>Find the Right Solution to Your Healthcare Challenges - Part One</title>
    <pubDate>Mon, 11 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17720.html</link>
    <description>EMC Documentum enterprise content management technologies enable the organization to easily capture, manage, and access this data electronically. The attendee of this webcast will find out how to better manage processes and information. With EMC content management solutions, one can address critical processes and information automatically. From audit trails and consent forms to explanation of benefits, HIPAA privacy regulations, and incident reporting and payer claims processing - to name a few. The attendee will learn to enhance processes for increased clinician satisfaction, operational efficiency, and a higher quality of patient care.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17720.html</guid>
  </item>
  <item>
    <title>Maintaining HIPAA's Promise</title>
    <pubDate>Mon, 11 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17713.html</link>
    <description>HIPAA Administrative Simplification, as envisioned by Congress, codified by law and embraced by the health care industry,  was designed to reduce administrative costs by increasing efficiency through the exchange of electronic communications between providers and payers, according to the regulations. As the Department of Health and Human Services (HHS) noted in its preamble,</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17713.html</guid>
  </item>
  <item>
    <title>Convene with the Candidates of AHIMA 2004</title>
    <pubDate>Mon, 11 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17708.html</link>
    <description>The 2004 American Health Information Management Association (AHIMA) election is in full swing with only two weeks left to cast vote. Polls opened April 14 at 12:00 a.m. EST and will close on June 4 at 11:59 a.m. EST. AHIMA members can vote via AHIMA's Web site, www.ahima.org. The Web site also has more national election details. This is the year of the electronic health record (EHR), so each candidate will have new and challenging duties to carry out. Members have their choice from two presidential candidates, six Board of Directors candidates, six Council on Accreditation candidates and six Council on Certification candidates.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17708.html</guid>
  </item>
  <item>
    <title>Health IT Stimulus Funds</title>
    <pubDate>Mon, 11 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17699.html</link>
    <description>Experience an all new Web Seminar Series programmed and presented by Health Data Management editors, who are joined by industry visionaries to provide attendees with unique, detailed and authoritative perspective on the Stimulus Funds and all the opportunities surrounding the HealthCare Industry.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17699.html</guid>
  </item>
  <item>
    <title>Medical ScreenPhone to be Marketed soon by Lifespan</title>
    <pubDate>Thu, 07 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17689.html</link>
    <description>Lifespan is poised to begin marketing its Medical ScreenPhone, a Web-access telephony product. The marketing campaign will be targeted at the $14 trillion U.S. healthcare industry as a medical verification, authorization and billing solution and a home care communications tool.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17689.html</guid>
  </item>
  <item>
    <title>A Threat from Hackers to expose Health Data</title>
    <pubDate>Thu, 07 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Articles/abstract17688.html</link>
    <description>After several days, hacker claimed to have broken into a database and encrypted millions of prescription records at the Virginia Department of Health Professions, it remains unclear what happened.Whistleblower Web site Wikileaks.org last Sunday carried a report from an anonymous poster who said that the secure site for the Virginia DHP Prescription Monitoring Program (PMP) had been broken into by a hacker who made a $10 million ransom demand. The alleged ransom note posted on the PMP site claimed that the hacker had backed up and encrypted more than 8 million patient records and 35 million prescriptions and then deleted the original data.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Articles/abstract17688.html</guid>
  </item>
  <item>
    <title>Oracle Database 11g Security with Forrester: Access Control Webcast</title>
    <pubDate>Wed, 06 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17679.html</link>
    <description>Controlling access to sensitive data is not only sound business practice, it's the law. Regulations such as PCI, HIPAA, SOX, and many others all require enterprises to implement preventive controls to protect data privacy and integrity. In this webcast, Forrester Research analyst Jonathan Penn explains the importance of implementing strong internal database controls, such as Oracle Database Vault, to enforce separation of duties, and prevent unauthorized access to data by any user - including database administrators.</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17679.html</guid>
  </item>
  <item>
    <title>Using Email Encryption to Enforce Security Policies for PCI, GLBA &amp; HIPAA Compliance</title>
    <pubDate>Wed, 06 May 2009 00:00:00 CST</pubDate>
    <link>http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17675.html</link>
    <description>Ensuring your organization complies with today's increasingly complex regulations and industry mandates around email and data security can be both a legal and technical mine field.First you need to understand what data should be protected. Then you need to determine who in your organization has access to that data and is sending it to people outside of the organization. You also need to invest in technology to enforce your compliance policies. It can be intimidating for any IT department. Hearing how your peers have tackled these challenges can help you plan your approach to finding a solution. Watch the webinar,</description>
    <guid isPermaLink="false">http://www.compliancehome.com/resources/HIPAA/Webinars/abstract17675.html</guid>
  </item>
</channel>
</rss>
