/ /

Dava Stewart
How to choose your HIPAA security officer
In smaller practices, the position of security officer is often filled by whoever appears to have the time to fill it.
How to implement a cybersecurity awareness program
A security awareness program is a relatively inexpensive way to educate staff members about cybersecurity at your practice.
How to choose your HIPAA security officer
Choosing the right person to be the HIPAA security officer for your practice can make a big difference in how the staff views compliance.
Avoid common business associate agreement mistakes
Healthcare practices should have business associate agreements (BAAs) in place and review them regularly to remain HIPAA compliant.
Security Risk Assessments: Critical regardless of practice size
Small- and medium-size practices need to address risk assessments as the federal government steps up its HIPAA enforcement.
‘Minimum necessary’ standard perplexes practices
Flexibility allows practices to define what “minimum necessary” information must be shared regarding patient records, but many still are without a standard.
Yes, staff snooping of medical records is a privacy breach
Curiosity can be costly if your medical practice staff checks a patient’s medical record in certain situations, says a healthcare attorney.
Physicians get new clarification on HIPAA’s privacy rule
A pair of new fact sheets can help physicians determine when patient authorization to share information is not needed in the interest of care coordination.
HIPAA payouts rare, but complaints can be more costly
While practices are largely safe from paying monetary compensation to patients from a HIPAA violation, there are still threats outside of a courtroom.
Smartphones, text messaging and HIPAA compliance
With smartphone use in healthcare on the rise-both by patients and providers-there are important steps to take to avoid a HIPAA violation.