Search for: "HH Party Store" Results 41 - 60 of 140
Sort by Relevance | Sort by Date
RSS Subscribe: 20 results | 100 results
4 Apr 2019, 9:07 pm by Dan Flynn
Missouri remains pending  in federal court for Western Missouri while l the parties are taking a time-out  to work on details of a still undisclosed settlement agreement. [read post]
24 Feb 2019, 5:22 am by Rob Robinson
In 2013, the Department of Health and Human Services (HHS) released the HIPAA Omnibus Rule. [read post]
18 Feb 2019, 6:03 am by Aleksandra Vold and Kathryn Carey
This article is part of a series of blog posts exploring the recommendations and guidance Health & Human Services (HHS) provides to healthcare organizations in its Cybersecurity Best Practices report. [read post]
18 Dec 2018, 12:56 pm by Paulette Thomas
OCR’s investigation found that ACH had impermissibly disclosed the protected health information (PHI) of 9,255 patients to a third party for billing processing services — without the protections of a business associate agreement from November 2011 to June 2012 — and failed to adopt any policy requiring business associate agreements until April 2014. [read post]
Representatives from HHS, NIST, and Sentara Healthcare on a panel on “Best Practices for Managing Risk” noted that some organizations try to avoid offshoring by specifically providing in contracts that data will not be stored or accessed offshore. [read post]
17 Oct 2018, 4:19 pm by Cynthia Marcotte Stamer
While the previous OS iPad version remains available at the Apple App Store exit disclaimer icon (search under “HHS SRA Tool”), HIPAA Entities that presently use or plan to use the OS iPad tool should consider comparing the prior tool against the updated Windows SRA Tool to verify the continued suitability of its continued use and any adjustments in understanding or application that might be warranted by these differences. [read post]
27 Jun 2018, 3:56 pm by Robert Liles
  Now, the agency is required to initiate a formal investigation when a party appears to have exhibited willful neglect. [read post]
18 May 2018, 12:41 pm by Giles Peaker
At the end of June 2015, Mr K did hand over Mrs S belongings, which,having been stored in bin bags in a basement, were largely ruined by damp. [read post]
15 Feb 2018, 4:41 pm by Cynthia Marcotte Stamer
  For violations such as the failure to implement and maintain a required BAA where more than one Covered Entity bears responsibility for the violation, OCR an impose Civil Monetary Penalties against each culpable party. [read post]
12 Jul 2017, 3:50 am by Kevin LaCroix
John Stark Reed Readers undoubtedly are aware of the recent outbreak of ransomware incidents and the problems they present. [read post]
A contractor using an external CSP to store or transmit covered defense information must ensure that the CSP meets security requirements equivalent to those established by the Government for the FedRAMP “moderate” baseline at the time award. [read post]
10 May 2017, 3:14 pm by Cynthia Marcotte Stamer
Department of Health and Human Services (HHS) that the largest not-for-profit health system in Southeast Texas, Memorial Hermann Health System (MHHS) is paying to settle charges it violated the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule by issuing a press release with the name and other protected health information (PHI) about a patient without the patient’s prior HIPAA-compliant authorization under a Resolution Agreement and Corrective Action Plan… [read post]
27 Apr 2017, 8:22 am by Wachler & Associates, P.C.
However, through a HHS compliance review in 2015, it was discovered that there was no signed Business Associate Agreement between the parties prior to October 2015. [read post]
26 Apr 2017, 6:14 pm by Cynthia Marcotte Stamer
  Among other things, the corrective action plan requires CardioNet to complete the following actions to the satisfaction of OCR: Prepare a current, comprehensive and thorough Risk Analysis of security risks and vulnerabilities that incorporates its current facility or facilities and the electronic equipment, data systems, and applications controlled, currently administered or owned by CardioNet, that contain, store, transmit, or receive electronic protected health information… [read post]
24 Apr 2017, 5:08 pm by Cynthia Marcotte Stamer
  For violations such as the failure to implement and maintain a required BAA where more than one covered entity bears responsibility for the violation, OCR an impose Civil Monetary Penalties against each culpable party. [read post]
31 Mar 2017, 5:45 am by Damian J. Privitera
Various compliance deadlines under these regulations range 180 days after the effective date of the regulations to two years after the effective date for third-party service providers. [read post]
11 Jan 2017, 7:09 am by Robert Kraft
” The CBS Evening News reported, “Contaminated foods sometimes remains on store shelves for months because the FDA is slow to order a recall. [read post]
27 Oct 2016, 8:48 am by Cynthia Marcotte Stamer
OCR began investigating OHSU after the large public academic health center and research university centered in Portland, Oregon, submitted three HIPAA breach reports affecting thousands of individuals, including two reports involving unencrypted laptops and another large breach involving a stolen unencrypted thumb drive: On March 23, 2013, HHS received notification from OHSU regarding a breach of its unsecured electronic protected health information (“ePHI”) resulting from a… [read post]
HHS recognizes that in some cases, requiring more than one party to implement the same safeguards would be redundant. [read post]