Free Corporate Compliance e-Newsletters

APCs Weekly Monitor Compliance Monitor Healthcare Auditing Weekly HIPAA Weekly Advisor Medicare Weekly Update The RAC Report

HIPAA Weekly Advisor

This e-mail newsletter delivers how-to advice and breaking news on HIPAA regulations each week. Stay informed on timely topics, security news and regulations, and analysis of proposed and final HIPAA rules that will ensure patient information security.

Subscribe »

2009 | 2008 | 2007 | 2006 | 2005 | 2004 | 2003 | 2002 | 2001

HIPAA Weekly Advisor

Issue 58, November 5, 2001

• Protecting telecommuters

  What can you do to protect telecommuters from eavesdropping and intrusion?

• HIPAA policy and procedures for your billing office

  Are physicians' billing offices considered business associates? Do charts have to be locked in file...

• The privacy rule creates virtual organizations

  One of the emerging lessons learned from compliance assessments under HIPAA’s privacy rule is...

• Telephoning patient information and HIPAA

  What does HIPAA say about telephoning patient information? At a hospital, will a blanket consent...

• When you're registering patients, do they need to be in a spot by themselves?

  When you're registering patients, do they need to be in a spot by themselves? Can they be in an...

• Question of the Week: How does role-based access work?

  The HIPAA security requirements address role-based access. How does role-based access work?

• Gramm-Leach-Bliley legislation and HIPAA

  Can the privacy notice required by the Gramm-Leach-Bliley legislation be combined with the HIPAA...

• JCAHO survey requirements for HIPAA

  Has the JCAHO included HIPAA requirements in the survey application?

• What does HIPAA say about faxing patient information?

  What does HIPAA say about faxing patient information?

• E-mail and PHI

  Question of the Week: Under HIPAA, can we e-mail patient information outside of our health care...

• A look at corporate compliance plans in terms of HIPAA policies and procedures

  There’s something eerily familiar about a lot of the HIPAA requirements to many health care...

• Can an ASP provide a HIPAA-compliant solution?

  We are considering using an application service provider (ASP) to automate the referral and...

• Who approves amendments?

  The privacy regulation uses the words "covered entity" for those who decide whether amendments are...

• Are PDAs a threat to HIPAA?

  Increasingly our physicians are using their PDAs to download patient records to take home or work...

• What should a notice of privacy practices include?

  What should a notice of privacy practices include?

• When is it not necessary for a patient to provide prior consent?

  When is it not necessary for a patient to provide prior consent?

Issue 52, December 4, 2001

• What should we look for during a security-risk assessment?

  What should we look for during a security-risk assessment?

• Privacy officials: Determine the minimum necessary information

  Privacy officials: Determine the minimum necessary information

Issue 51, December 28, 2001

• Employee HIPAA training

  My facility is looking to provide HIPAA training for all employees. Do you have any suggestions?

Issue 50, December 21, 2001

• Have most facilities computerized all of their medical records?

  Have most facilities computerized all of their medical records?

Issue 49, December 14, 2001

• What is required for an information security risk analysis?

  What is required for an information security risk analysis?

Issue 48, December 7, 2001

• Releasing data to a direct mailing company

  Under HIPAA, is there an alternative to de-identifying data when releasing it to a direct mailing...

• Prepare for a new generation of regulation-savvy patients

  Prepare for a new generation of regulation-savvy patients

Issue 47, December 28, 2001

• How does HIPAA impact the MDS?

  How does HIPAA impact the MDS?

Issue 46, November 21, 2001

• Why is disaster recovery a proposed security requirement?

  The proposed HIPAA security requirements mention disaster recovery. I thought disaster recovery...