GAO report: CMS should standardize privacy breach reporting
HIPAA Weekly Advisor, September 11, 2006
Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!
More than 40% of federal contractors and Medicaid agencies responding to a Government Accountability Office (GAO) survey reported that they experienced a recent privacy breach involving PHI, according to the GAO's survey results.
The GAO report, Domestic and Offshore Outsourcing of Personal Information in Medicare, Medicaid, and TRICARE, also states that many federal contractors and state Medicaid agencies initiated domestic outsourcing of services involving PHI. Although only one survey respondent reported outsourcing such services directly offshore, many that outsourced domestically reported that they knew their domestic subcontractors used offshore outsourcing.
Among the GAO's recommendations is a proposal that CMS bring its privacy breach reporting process in line with the reporting procedures that apply to TRICARE and Medicare fee-for-service contractors. Currently, CMS does not require Medicare Advantage contractors or state Medicaid agencies to report privacy breaches.
Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!
Related Products
Most Popular
- Articles
-
- Q/A: Volume requirement for reporting hydration services
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- Catch up on what's new with injections and infusions
- Topic: CMS, OESS post new security compliance review information, checklist
- Capturing all necessary codes for IUD insertion and removal can be challenging
- What does case-mix index mean to you?
- QA:Coding multiple initial infusions
- News and briefs: Oklahoma Osteopathic Association against residency bill change
- HIPAA Q&A: Level of encryption needed for email
- OB services: Coding inside and outside of the package
- E-mailed
-
- Q/A: Volume requirement for reporting hydration services
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- HIPAA Q&A: Level of encryption needed for email
- Catch up on what's new with injections and infusions
- New conflicts of interest create new challenges
- Q/A. One injection code or two?
- What does case-mix index mean to you?
- Joint Commission Center announces handoff communication solutions
- Inside best practice: Reduce patient falls with a stoplight
- Identify modifiable risk factors to prevent patient falls
- Searched