decisionhealth Newsletters, Part B News - 2012 Issue 4 (April)
Internet leak causes small practice to get hit with $100,000 fine after HHS investigation
Subscribe or sign in to view the full article.
Article Overview
This article covers an HHS enforcement action against a small physician practice after protected patient information was exposed through an internal web-based calendar and related electronic services. It is relevant to healthcare compliance teams, practice administrators, and coding/billing staff who need awareness of HIPAA Privacy and Security Rule obligations, OCR enforcement, and business associate oversight. The article summarizes the investigation, the kinds of compliance gaps HHS identified, and the significance of the resolution for small covered entities.
Why This Topic Matters
HIPAA enforcement affects operational risk, patient privacy, and practice compliance regardless of practice size. Readers can use this article to understand why administrative, technical, and vendor-related safeguards matter and how HHS/OCR evaluates failures to protect electronic protected health information.
What You Will Learn
- How an HHS investigation can arise from a patient information exposure involving electronic tools
- What kinds of HIPAA compliance areas are commonly reviewed in an OCR enforcement action
- Why small practices are still expected to maintain privacy and security safeguards
- How outside service relationships can factor into compliance oversight
Who Should Read This
- Healthcare compliance professionals
- Practice administrators
- Physician office managers
- Privacy and security officers
- Revenue cycle and billing teams
- Healthcare legal and risk management staff
Subscribe or sign in to view the full article.
Quick, Current, Complete - www.findacode.com