Talking HICP with Erik Decker Part 1 - Ep 230

We covered the release of HICP or Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients back in Feb in the episode we called 5 Threats and 10 Protection Practices – Ep 189.  HICP has now been out for a bit and the next phases of the project are in process.  Today we discuss all things HICP with Erik Decker who is the Health Sector Coordinating Council Co-Lead of the 405(d) Task Group that developed this tool to help our sector follow solid cybersecurity practices.

More info at HelpMeWithHIPAA.com/230

Check out the episode!

HIPAA Penalties Due To Disarray - Ep 229

HIPAA penalties are always discussed in training and presentations about HIPAA.  Those discussions are usually more about an overview of what is in the law than actual information on how the law is applied.  HIPAA penalties are really not seen often. Civil money penalties are not part of the settlements we usually see but OCR announced a big one in October.  How do they really apply those huge numbers everyone talks about but we never see?

More info at HelpMeWithHIPAA.com/229

Check out the episode!

HIPAA is the Floor - Ep 228

The annual conference hosted by NIST and OCR Safeguarding Health Information: Building Assurance through HIPAA Security and the repeated message on day one of the conference was “HIPAA is the floor” which started with OCR Dir Severino’s keynote. We always get information at some point that makes these conferences worth the time. What did we get from this one? 

More info at HelpMeWithHIPAA.com/228

Check out the episode!

Tales From The Dark Side Of HIPAA - Ep 227

As is our custom, each year we have a halloween-themed episode. This year we are thrilled to bring you several very real Tales From The Dark Side Of HIPAA.  Thanks to our friend, Jack Rhysider from DarkNet Diaries for recording our haunting lead-in!

More info at HelpMeWithHIPAA.com/227

Check out the episode!

Social Media and PHI as Oil is to Water - Ep 226

Social media and PHI get the OCR spotlight in the latest settlement announced.  Reading these settlement agreements provide the best guidance from OCR which is why we always take the time to get those details for you.  How much have you considered about your social media policies and how your staff understands their responsibilities?

More info at HelpMeWithHIPAA.com/226

Check out the episode!

Bad luck breaches? - Ep 225

Is there such a thing as bad luck breaches?  Most of us don’t expect luck to rule our world although I will always take good luck if I can get it.  But when bad things happen sometimes we say it is due to a string of bad luck. Can data breaches be due to one of those strings of bad luck?

For more info go to HelpMeWithHIPAA.com/225

Check out the episode!

Patient Access Settlement - Ep 224

The first patient access settlement has been announced by OCR.  Director Severino mentioned they would be putting an emphasis on this issue and we now have the first enforcement come through.  What should you learn from this settlement? It included some interesting corrective action requirements.

More HelpMeWithHIPAA.com/224

Check out the episode!