Misconfigured Elasticsearch Security Settings Exposes PHI of 137,000 Individuals
Approximately 137,000 individuals have had their data exposed online due to misconfigured security settings [...]
Articles by Thomas Brown
OCR Advises Healthcare Groups to Carry Out Gap Analysis
In its April 2018 cybersecurity newsletter, OCR lauds the benefits of completing a gap analysis along with a [...]
Doctor’s Management Service Inc. Suffers Ransomware Attack
Doctor’s Management Service Inc. is notifying patients of a data breach following a ransomware attack on [...]
Over 2,200 Patients Affected by Harbor Behavioural Health Security Incident
An unauthorised individual has compromised the PHI of over 2,200 patients after gaining access to Harbor [...]
Breach at Health Recovery Services Affects 20,000 Patients
A breach at Health Recovery Services has compromised the protected health information (PHI) of over 20,000 [...]
5,000 Metrocare Service Patients Affected by Phishing Attack
Over 5,000 patients of Metrocare Services have had their protected health information (PHI) comprised [...]
Estimating the Cost of a HIPAA Data Breach
Estimating the cost of a HIPAA data breach is not a streamlined process, at least not until a number of years [...]
HIPAA Compliance & Rackspace
Rackspace is conscious that by making its services available to healthcare groups, the company is classified [...]
What Happens if You Breach HIPAA Rules?
HIPAA requires covered groups to supply training to employees to make sure they are aware of HIPAA rules and [...]
HIPAA Compliant Text Messaging
Even though HIPAA does not specifically rule out sharing Protected Health Information (PHI) by text, a system [...]
HIPAA Compliance and Uber Health
Last month, Uber officially launched Uber Health – a service that allows you to set up transport for [...]
Texas Nurse Sacked Following Social Media HIPAA Breach
A nurse who was working at a Texas children’s hospital has been let go from her position after it was [...]
What is classified as Protected Health Information?
The Health Insurance Portability and Accountability Act (HIPAA) obligates covered bodies to maintain [...]
HIPAA Compliance & Google Voice
Google Voice is a widely used and intuitive telephony service that incorporates voicemail, voicemail [...]
How to Report a HIPAA Violation
It is important that all worker in the healthcare industry have a firm grasp of what a HIPAA violation is and [...]
Can Google Sheets be used in line with HIPAA Rules?
Under HIPAA Rules, healthcare groups must put in place security measures to ensure the confidentiality, [...]
Is Slack HIPAA Compliant?
To date, ascertaining whether or not the Slack is compliant with HIPAA legislation has proved difficult as it [...]
HIPAA Breaches of 2018: Largest Incidents Revealed
This post lists the largest healthcare data breaches of 2018: Healthcare data breaches that have lead to the [...]
Box & HIPAA Compliance
Box is a cloud storage and content management service that allows collaboration and file-sharing or users. [...]
Clearwater Identify Most Frequent Security Weaknesses in Healthcare
The company Clearwater have identified the most frequent security weaknesses in the healthcare sector. They [...]
$75,000 HIPAA Violation Fine Issued to McLean Hospital by Massachusetts Attorney General
A $75,000 HIPAA violation fine has been issued to McLean Hospital by Massachusetts Attorney General Maura [...]
Serious Phishing Threat and Importance of Security Awareness Training Highlighted in Results of Study
A large amount of employees are still being fooled by phishing emails, a new study has revealed. [...]
250-Device Malware Attack Detected by University of Maryland
On December 9, 2018, the University of Maryland Medical System detected an unauthorized individual on its [...]
AMIA and AHIMA: Adjustments to HIPAA Needed to Enhance Access and Portability of Health Data
The American Medical Informatics Association (AMIA) and the American Health Information Management [...]
Potential HIPAA Violation at Key Dental Group
Key Dental Group, a dental clinic in Pembroke Pines, FL, is advising clients of an alleged HIPAA violation [...]
HIPAA Compliance Officer Duties
The Healthcare Insurance Portability and Accountability Act states that an individual(s) within a Covered [...]
Meaningful Use & the HITECH Act
When the HITECH ACT and Meaningful Use incentive program was established in 2009, it was referred to as [...]
What is Covered Under HIPAA?
HIPAA is a federal legislation that established standards in healthcare in relation to patient privacy and [...]
HIPAA Law: What does it Protect?
One of the chief focuses aims of HIPAA is to safeguard the privacy of patients by ensuring certain types of [...]
HIPAA Compliance Verification Explained
HIPAA Compliance Verification is how training providers refer to the process where an individual or [...]
The HITECH Act Explained
The HITECH Act – or Health Information Technology for Economic and Clinical Health Act – formed part of [...]
What Information is Protected by HIPAA?
There can sometimes be confusion about what information is protected by HIPAA due to some sources mistakenly [...]
How to Report a HIPAA Violation Anonymously
Most healthcare group put a lot of work into ensuring they adhere with all relevant HIPAA Rules, but from [...]
What does HIPAA do?
HIPAA is federal legislation that brought in standards in healthcare linked to patient privacy and the [...]
HIPAA Compliance and Healthcare Information
When the Final Omnibus Rule enacted legislation regarding the Health Insurance Portability and Accountability [...]
Dentists & HIPAA Compliance
Dentist and HIPAA Compliance need to be strongly considered as research conducted by the American Dental [...]
Clinical Texting & HIPAA Compliance
HIPAA compliance for clinical texting has become an issue in relation to the use of personal mobile devices [...]
Improving Hospital Workflows
Improving hospital workflows is something that concerns senior healthcare management at all levels. [...]
Report: 70% Rise Increase in Healthcare Data Breaches 2010-17
There has been a 70% rise in healthcare data breaches from 2010-17, according to a study completed by two [...]
Fairview Southdale Hospital ‘Videotaped Patients’ Without Prior Knowledge or Consent Being Given
The HHS’ Centers for Medicare and Medicaid Services (CMS) has conducted a review at Fairview Southdale [...]
App for Healthcare Messaging
A healthcare messaging app is a common way of adhering with the HIPAA security and privacy rules relating to [...]
Do HIPAA Rules Establish Obstacles That Stop Data Sharing?
The HHS has put together a Request for Information (RFI) to ascertain how HIPAA Rules are hampering patient [...]
HIPAA-Covered Entities Exempt from California Consumer Privacy Act Following Amendment
In June 2018, the legislature in California enacted the California Consumer Privacy Act (CCPA) which [...]
What is the Relationship between HITECH, HIPAA, and Electronic Health or Medical Records?
Title 1 of HIPAA initially was formulate to deal with the portability of health insurance and protecting the [...]
Texting Policy for HIPAA
A HIPAA texting policy is a document that should be put together after a risk assessment has been completed [...]
Improving Hospital Communication
The challenge of how to enhance hospital communication is a difficult one, but one that can lead to [...]
Microsoft ADFS Flaw Allows Skipping Past of Multi-Factor Authentication
A flaw has been identified in Microsoft’s Active Directory Federation Services (ADFS) that permits [...]
Is a HIPAA Breach Grounds for Sacking an Employee?
Not all HIPAA breaches are the same, although any breach of HIPAA Rules is a serious matter that calls for [...]
What is the Aim of HIPAA?
HIPAA legislation was first brought in 1996. In its initial form, the legislation assisted in ensuring that [...]
Articles on HIPAA
Here are a variety of HIPAA articles providing further details and guidance on HIPAA compliance for [...]
Email HIPAA Compliance
Whether you need to ensure your email complies with HIPAA will depend on how you are going to use email with [...]
HIPAA Patch Management Requirements Highlighted by OCR
Computer software often has mistakes in the code that could possibly be exploited by malicious actors to gain [...]
Healthcare Data Breach Costs $408 Per Record, More than Any Other Sector
A recent report released by the Ponemon Institute on behalf of IBM Security has revealed the hidden cost of [...]
Humana Reports Sophisticated Cyber Spoofing Attack
Humana is alerting members in a number of states that their PHI may have been accessed during a [...]
App for HIPAA Compliant Messaging
A HIPAA compliant messaging app is a vital part of a secure messaging solution that can allow healthcare [...]
Aetna Survey: Greatest Healthcare Concerns for Consumers are Patient Privacy and Security
A survey conducted by the health insurance group Aetna asked consumers question about their attitudes to [...]
HIPAA Compliance & Text Messages
Sharing PHI in text messages and HIPAA compliance are not usually words you would find beside each other. [...]
Risk Assessment & HIPAA
The requirement for Covered Entities to carry out a HIPAA risk assessment is not a new provision of the [...]
HIPAA Compliance & FaceTime
An thorough search of the Apple website has shown no evidence that Apple will sign a business associate [...]
Healthcare & Secure Text Messages
If your group is in – or associated with – the medical sector, now would be a good point in time to [...]
Email Archiving and HIPAA Compliance
Though HIPAA compliant email archiving is not obligatory under the Security Standards for the Protection of [...]
No Private Cause of Action Confirmed in HIPAA District Court Ruling
Patients who think that HIPAA Rules have been violated can file a compliant to the Department of Health and [...]
Dignity Health Reports Multiple Data Breaches
On May 10, 2018, Dignity Health made OCR aware of a data breach impacting patients of its St. Rose [...]
What is a HIPAA-Covered Entity?
The HIPAA Covered Entity definition seems quite simplistic. The Privacy Rule defines a Covered HIPAA Entity a [...]
Legal Actions Submitted Over Alleged HIPAA Breaches
Two legal actions have recently been filed in relation to alleged breaches of Health Insurance Portability [...]
South Carolina Insurance Data Security Act Signed into Law
On May 14, 2018, South Carolina Governor Henry McMaster the South Carolina Insurance Data Security Act was [...]
Text Messaging Policy for HIPAA
Healthcare organizations and other covered entities are required to put in place a HIPAA text messaging [...]
Consulting Service for HIPAA
HIPAA consulting services are usually firms of compliance specialists with a deep understanding of the Health [...]
Can A Patient Take a Legal Action in relation to a HIPAA Breach?
Can a patient take a legal action for a HIPAA violation? There is no private cause of action in HIPAA, so a [...]
GAO Audit Indicates that Medical Records Can be Difficult and Costly to Obtain
A recent audit completed by the Government Accountability Office (GAO) has shown patients still face many [...]
Hospitals & Internet Access Control
Before talking about how to limit Internet access in hospitals, it might be a good idea to discuss why [...]
HIPAA Compliance & SendGrid
SendGrid is an email marketing service that allows businesses to quickly and easily communicate their [...]
90,000 Records Compromised in Spate of Phishing Attacks on Healthcare Groups
The past few weeks have seen a massive increase in successful phishing attacks on healthcare groups. In a [...]
HIPAA Authorization Defined
The HIPAA Privacy Rule, which was brought in on April 14 2003, introduced standards in relation to allowable [...]
When did HIPAA become Enforceable?
HIPAA became enforceable on August 21, 1996 when then U.S. President Bill Clinton signed the legislation into [...]
What is Considered a Breach of HIPAA?
The Health Insurance Portability and Accountability Act of 1996 was a sector-wide influencing piece of [...]
HIPAA Compliance & Zendesk
Zendesk is a San Francisco based customer service software and support ticketing system provider which is [...]
Google Cloud & HIPAA Compliance
Healthcare groups are, more and more, taking advantage of cloud platforms. The healthcare cloud computing [...]
Medical Software Applications & HIPAA Compliance
HIPAA compliance for medical software applications can be a complicated issue to comprehend. Some eHealth and [...]
Securing Healthcare Data from Phishing
One of the chief areas of online security that all HIPAA-covered entity should focus on is to protect [...]
HIPAA Retention Requirements Explained
The subtle differences between HIPAA medical records retention and HIPAA record retention lead to some [...]
Healthcare MSPs & Web Content Filtering
Evaluating the available solutions for web content filtering for healthcare MSPs can be a time-consuming [...]
Azure & HIPAA Compliance
Many healthcare groups are choosing to move some of their services to the cloud, and a large number have [...]
Criteria for HIPAA Assessment
There are two potential interpretations of the term “HIPAA assessment criteria” – the criteria that [...]
Best Practices for HIPAA Compliance
14 years later, public and private sector organizations are still constantly found out of compliance with the [...]
Defending VS Internal Threats in Healthcare Organizations
One of the most serious data security challenges is how to defend against insider threats in the healthcare [...]
What is Thought of as PHI?
Terms such as PHI and PII are often mentioned in healthcare, but what do they refer to and what details do [...]
What is a Limited Data Set as Defined in HIPAA
A limited data set as defined in HIPAA is a group of identifiable healthcare data that the HIPAA Privacy Rule [...]
Why Dental Offices Should be Worried About HIPAA Compliance
In 2015, Dr. Joseph Beck was first ever dentist to receive a HIPAA breach penalty, which sent a warning to [...]
What are the Consequences of Violating HIPAA?
HIPAA states that covered entities must provide training to staff so that HIPAA Rules and regulations are [...]
WordPress & HIPAA Compliance
WordPress is a handy content management system that allows websites to be quickly and easily set up. The [...]
Zoom & HIPAA Compliance
Zoom is a cloud-based video and web conferencing solution that lets workers across many different locations [...]
HIPAA History
After HIPAA had been signed into law, the US Department of Health and Human Services set about developing the [...]
Employees facing Prison Terms for HIPAA Fines
The fines for HIPAA violations by employees can be severe, especially those where protected health [...]
Becoming HIPAA Compliant
There is no quick way to becoming HIPAA compliant. HIPAA compliance means putting in place controls and [...]
Improper Disposal of PHI is Commonplace According to JAMA Study Results
A recently published study by JAMA has emphasised just how often hospitals are disposing of PHI in an unsafe [...]
Pharmacies & HIPAA Compliance
HIPAA is federal legislation that set in place the acceptable uses and disclosures of protected health [...]
HIPAA Compliance and Yammer
Yammer has been operating as a social networking and collaboration platform since 2008. Its widespread use [...]
New HIPAA Regulations and Legislation Changes for 2018
HHS’ Office for Civil Rights (OCR) director Roger Severino has indicated there are some HIPAA changes under [...]
HIPAA Breach Notification Rule Summary
The Health Insurance Portability and Accountability Act of 1996 is one of the most significant pieces of [...]
ComplianceHome is a registered trademark. Copyright © 2025 ComplianceHome. All rights reserved.