DiscoverHelp Me With HIPAA
Help Me With HIPAA
Claim Ownership

Help Me With HIPAA

Author: Donna Grindle and David Sims

Subscribed: 52Played: 824


In today's environment of data breaches, identity theft, fraud, and increasing connectivity, HIPAA Privacy and Security rules are a responsibility to your patients and your clients. HIPAA isn't about compliance, it's about patient care.
226 Episodes
The Ponemon Institute has produced an annual study of data breach costs. This is the 14th year. We have used it as a guide for a lot of information over the years. The data has consistently been helpful for us to understand what are the key drivers in data breach costs, remediation, and response. If you can find what the major factors include, it is a great way to determine your priorities in investing resources with the biggest impact. Let’s see what we learned from the 2019 version sponsored by IBM. More info at  
Who is a business associate? A listener asked for an episode on it. Turns out we haven't done one since episode 2.  Wow! So, maybe there is more we have to add to that topic in 2019 after 214 other episodes.  Today, let’s talk about how to determine who is your Business Associates or BA. More info at
We have gotten a flurry of listener questions and comments lately.  Since it is so much easier to do an episode based you listener questions that writing up a whole plan we are definitely doing those today.    We really do read and respond to as many as we can. So here we go. More info at
If you haven’t heard of it before there is a thing called the California Consumer Privacy Act (CCPA).  It is considered the first version of a GDPR-type legislation on this side of the pond.   It becomes effective Jan 1, 2020. There are many folks that think the CCPA isn’t something for them to worry about.  Well... Maybe you should take a second to reconsider that position. More at
Today we discuss 5 medical record uses and disclosures rules that I have been covering recently in training.  Medical records are always around for those of us in healthcare. It is so easy to forget that the rules apply to more than just data breaches and social media.  There are some very basic concepts that people who have been dealing with medical records for years are surprised to learn. Here are five of them we use the most. More at
We need to keep up with our education just like everyone else to keep up with cybersecurity tips and trends.  Donna hit some training at SecureWorld and sat in on a 6-hr online seminar offered by Dark Reading. All of that thinking and learning means we have cybersecurity tips and trends to share in this episode.  This is not just for those who worry about HIPAA. More info at
The debate continues in ransomware attacks, do you make the ransom payment or not?  Lately, we have seen many payments being announced. This should be in your incident response plan ransomware playbook.  These decisions should be discussed now, not when an attack happens. What are the pros and cons to paying and what should be in your ransomware response plans? More info on Help Me With HIPAA blog post.
False claims settlements over meaningful use money have popped into the news again. The provider was sued by whistleblowers and the DOJ for not doing a security risk analysis but attesting to one to get the meaningful use payments anyway. There is whistleblower's angle in this case which makes it even more interesting. If you know anyone that has received any meaningful use money they should check out this episode! More info at
This new BA guidance from OCR is important because it defines clearly all the things we hear misstated over and over.  Several of our Top 10 Wrong HIPAA Statements episode are addressed in the simple ten item list. Today we will discuss the announcement and what does that mean to BAs and their privacy and security programs. More info at
The multi-state settlement with Medical Informatics Engineering makes the OCR settlement seem like a cake walk.  The vendor agrees to pay OCR $100,000 with a standard 2-year corrective action plan. The states get $900,000 plus 5 years of very specific corrective action requirements.  Vendors need to pay attention to this case and take appropriate action now. More info at
Download from Google Play
Download from App Store