HHS releases proposal to overhaul patient privacy rules for addiction treatment

The Department of Health and Human Services (HHS) announced proposed changes late last week to the federal regulations governing the confidentiality of patient records created by federally-assisted substance use disorder treatment programs, known as 42 CFR Part 2. Drafted in 1975, 42 CFR Part 2 was designed to protect patient records created by federally-assisted programs…

Are your Business Associates protecting your patient data?

This week, American Medical Collection Agency (AMCA), the billing collections vendor for both Quest Diagnostics and LabCorp, reported to both companies that the data of nearly 20 million customers may have been compromised.

HHS reduces maximum civil penalties for HIPAA violations

The HHS published a Notification of Enforcement Discretion Regarding HIPAA Civil Money Penalties that changes the interpretation of fines for violations defined under the HITECH Act, effectively reducing some of the annual limits. 

Email breaches in three states expose protected health information

Three email system breaches in three states exposed protected health information and each healthcare entity is stepping up efforts so it won't happen again.

Payroll phishing scam targets university employees

Three university personnel began the new year without paychecks after falling victim to a payroll phishing scam.