HIPAA Q&A: Telehealth challenges, risk assessments, and more

Why This Topic Matters

Telehealth and other remote-care workflows expand the scope of HIPAA compliance planning beyond traditional office settings. The article helps organizations understand the types of privacy, security, vendor, and risk-assessment issues that should be reviewed when updating compliance programs.

Article Sections

1. Telehealth privacy and security strategy

   Discusses how organizations should think about privacy, security, and compliance planning for telehealth services in a post-pandemic environment. Covers broad organizational practices, staff and patient awareness, vendor oversight, and environmental considerations.

2. HIPAA risk assessment challenges and common oversights

   Reviews common issues organizations face when conducting HIPAA risk assessments, including scope, changing operations, and support for ongoing assessments. Also addresses areas that may be overlooked when evaluating risks across digital, physical, and operational environments.