Due to the speed and convenience of texting, many physicians use this form of communication to consult with other providers, exchange lab test results, and other patient information. If text messaging is used to transmit or receive electronic protected health information (EPHI), it must be evaluated as part of the covered entity’s Security Risk Analysis…. Continue reading
Continue readingPosts tagged hipaa
Failure to Establish Business Associate Agreements
Phishing Scam
OCR Enforcing Limits on Medical Records Fees
The Office for Civil Rights (OCR) has published new information emphasizing patient right of access to records, along with fees that may be charged for printed and electronic copies. It stresses that medical records fees must be cost-based and reasonable. The Privacy Rule permits a covered entity to impose a reasonable, cost-based fee to provide… Continue reading
Continue readingHow to Respond to OCR Audit Requests
Eagle Associates has prepared an article and a short video, both of which provide instruction on responding to communications from OCR regarding the audit program. You can either read the article, or watch the video. You do not need to view both, as the content is the same. Contact our office at (800) 777-2337 if you have… Continue reading
Continue readingCompliance is More than Training
The following information provides a brief roadmap to achieving compliance, and is intended to help you understand the need to do more than employee training in order to avoid enforcement action from regulatory agencies. Many practices view compliance training as the primary element for meeting regulatory requirements. Although training is a key component, the reality… Continue reading
Continue reading