Patient Privacy: Is New Technology Leaving Your Organization Open to HIPAA Violations?

Why This Topic Matters

It helps covered entities and compliance leaders recognize how new technology, risk assessment practices, employee training, and device security can create HIPAA exposure if not managed carefully.

Article Sections

1. Background

   Introduces the enforcement matter and the organizations involved. Summarizes the general compliance context surrounding the settlement.

2. Beware of Using Internet Applications

   Discusses concerns raised by internet-based document sharing tools and the broader security issues associated with storing protected information in online applications.

3. Perform a Risk Analysis Before Using New Tech

   Covers the role of security risk analysis and the importance of evaluating safeguards before adopting new technologies. Also notes related compliance review themes for covered entities and business associates.

4. Train Your Staff & Know What They’re Doing

   Describes workforce oversight, policy awareness, and self-assessment topics tied to organizational procedures and incident reporting. Addresses employee training and internal compliance checks.

5. Encrypt all Portable Devices Containing any PHI

   Focuses on the separate portable-device breach incident and the security issues raised by laptops, removable media, and other mobile equipment. Highlights the article’s emphasis on device protection and response practices.