What should we do if a business associate (BA) misuses our PHI?
HIM-HIPAA Insider, September 18, 2006
If you know the BA has violated its contract, you must take reasonable steps to mitigate the breach or end the violation. If such steps are unsuccessful, you must terminate the contract. If you cannot terminate the contract, you must report the problem to HHS.
The HHS commentary notes that "knowing" that a BA has violated its contract means you have substantial and credible evidence of a violation. HHS also notes that although this standard relieves you of the need to actively monitor BAs, you must nonetheless investigate complaints or other evidence of violations by a BA.
- Differentiate between types of wound debridement
- Complications from immobility by body system
- Why Is The ED Such A Pain?
- OSHA issues new inspection guidelines for field inspectors: How you’re affected
- Note similarities and differences between HCPCS, CPT® codes
- Don’t forget the three checks in medication administration
- OB services: Coding inside and outside of the package
- ICD-10-CM coma, stroke codes require more specific documentation
- What does case-mix index mean to you?
- Your Hospital's Financial Statements: How Management Keeps Score
- Q&A: Review palliative care charts and query for 'comfort care' when appropriate
- Q&A: Coding for palliative care
- Nursing G-codes Continue to Confuse Clinicians
- Nurse practitioners improve discharges, reduce readmissions, and save hospitals money
- Know How to Document Missed Visits
- Infection Control
- Homecare Q&A, September 17, 2016
- Get the facts on coding for non-biodegradeable drug delivery implants
- CPT coding for urgent care clinics
- Consider four tips when writing your use-of-force policy