Michael Cassidy on Health Insurance Portability and Accountability Act (HIPAA)

2022 Budget Bill Includes Mandatory Healthcare Cyber Incident Reporting

The Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), was passed as part of the consolidated Budget Act for 2022, which also included the telehealth provisions. The definition of “covered entity” in the...more

4/5/2022 / Covered Entities , Cyber Attacks , Cyber Incident Reporting , Cybersecurity Information Sharing Act (CISA) , Department of Homeland Security (DHS) , Federal Budget , Health Care Providers , Health Insurance Portability and Accountability Act (HIPAA) , Medicare

Proposed HIPAA Changes Intended to “Empower Patients” and “Improve Coordination of Care”

On December 10, 2020, the Department of Health and Human Services (HHS) and the Office of Civil Rights (OCR) collaborated on announcing proposed HIPAA changes, intended to “empower patients” and “improve coordination of...more

2/24/2021 / Department of Health and Human Services (HHS) , Electronic Health Record Incentives , Health Care Providers , Health Insurance Portability and Accountability Act (HIPAA) , OCR , Patient Privacy Rights , PHI , Proposed Amendments

Orthopedic Practice Pays $1.5 Million for HIPAA Damages

Most medical practices view HIPAA compliance as maintaining appropriate documentation regarding patient notices and consents, and controlling access to the PHI within the office; that’s PRIVACY. Practices tend to forget the...more

9/29/2020 / Cybersecurity , Data Protection , Data Security , Electronic Medical Records , Health Care Providers , Health Insurance Portability and Accountability Act (HIPAA) , PHI

COVID Impact: HIPAA and Privacy

The following are just some random thoughts or curated information regarding the impact the COVID pandemic will have on privacy in general, and health information privacy in particular. I have attached a link to...more

4/20/2020 / Coronavirus/COVID-19 , Department of Health and Human Services (HHS) , Health Care Providers , Health Insurance Portability and Accountability Act (HIPAA) , HIPAA Privacy Rule , OCR , Public Health Emergency , Relief Measures

OCR Relaxes HIPAA Rules for COVID-19 Disclosures

Although many believe the HIPAA rules already allow for disclosure of COVID-19 cases on the basis of a public emergency, OCR just issued Guidance, attached in the link below, confirming disclosure is permitted when needed to...more

3/27/2020 / Coronavirus/COVID-19 , Health Care Providers , Health Insurance Portability and Accountability Act (HIPAA) , OCR , Public Health Emergency , Relief Measures

Regulatory Sprint to Coordinated Care: CMS/AKS and OIG Stark Proposed Amendments

HHS has long admitted that the Anti-Kickback Statute (AKS) and the Stark law have not evolved to keep pace with the transition to value based care. In June of 2018, HHS issued an RFI seeking additional information and HHS...more

10/23/2019 / Anti-Kickback Statute , Department of Health and Human Services (HHS) , Fair Market Value , Health Care Providers , Health Insurance Portability and Accountability Act (HIPAA) , Medicaid , Medicare , OIG , Safe Harbors , Value-Based Care

New Telemedicine Act in Pennsylvania

A new Telemedicine Act is wending its way through the legislative process in Pennsylvania. Senate Bill 780 of 2017 (attached hereto as a PDF) has been unanimously passed by the Senate and referred to the House Professional...more

7/31/2018 / Health Care Providers , Health Insurance , Health Insurance Portability and Accountability Act (HIPAA) , Pending Legislation , Physicians , Telehealth , Telemedicine

HHS Publishes Health Care Cyber Attack Checklist

HHS has published a very brief guide, in the form of a checklist, to explain the steps for a HIPAA covered entity or business associate to take in response to a cyber related security incident. You can access the checklist at...more

6/26/2017 / Business Associates , Covered Entities , Cyber Attacks , Department of Health and Human Services (HHS) , Health Insurance Portability and Accountability Act (HIPAA) , Incident Response Plans

OCR Announces HIPAA Security Settlement with Cancer Care Group, P.C.

In September, 2015, OCR and HHS issued a press release announcing a Resolution Agreement with the Cancer Care Group, P.C., which included entry into the agreement, the adoption of a robust compliance plan, and the payment of...more

10/28/2015 / Data Breach , Department of Health and Human Services (HHS) , Health Insurance Portability and Accountability Act (HIPAA) , OCR , PHI , Risk Assessment , Security and Privacy Controls

CMS Cancels ICD-10 Testing

The MLN Connects™ Provider eNews contains important news, announcements, and updates for health care professionals. ICD-10 Compliance Date - On April 1, 2014, the Protecting Access to Medicare Act of 2014 (PAMA)...more

5/5/2014 / Centers for Medicare & Medicaid Services (CMS) , Department of Health and Human Services (HHS) , Health Insurance Portability and Accountability Act (HIPAA) , ICD Codes , MACs , Protecting Access to Medicare Act

Physical Therapy Provider Enters into HIPAA Settlement

U.S. Department of Health and Human Services Office for Civil Rights (OCR) recently announced yet another enforcement action. Specifically, OCR opened a compliance review of Concentra Health Services (Concentra) upon...more

4/25/2014 / Compliance , Data Breach , Data Protection , Department of Health and Human Services (HHS) , Encryption , Enforcement Actions , Health Insurance Portability and Accountability Act (HIPAA) , Healthcare , OCR

Michael Cassidy

Tucker Arensberg, P.C.

Popular Topics by This Author

Latest Posts › Health Insurance Portability and Accountability Act (HIPAA)