DiscoverHelp Me With HIPAAWhat is reasonable and appropriate? Ep 118
What is reasonable and appropriate? Ep 118

What is reasonable and appropriate? Ep 118

Update: 2017-08-25
Share

Description

What is reasonable and appropriate?

The HIPAA legal reference and guidance mentions reasonable and appropriate all over the place. Many times that concept creates confusion. How do you determine what is reasonable or appropriate for any environment?

More at HelpMeWithHIPAA.com/118

Comments 
loading
In Channel
Network Security Alerts For Everyone - Ep 158
In the past few weeks, the nerd news has been full of network security alerts and discussions about issues potentially lurking on every network, especially smaller ones.  These are not the things we normally worry about either. You usually think Windows, Office, Adobe, etc patches are the main alerts to worry about on your network. These are new alerts that could be in every network you use including home, public wifi, and work. Per usual, we are here to explain them as best we can - in English.  Tech folks you should listen up to what we expect you to be doing for our listeners who rely on you, too. For more information go to HelpMeWithHIPAA.com/158    

Network Security Alerts For Everyone - Ep 158

2018-06-1500:44:23

Cyber Experts Agree We Are Not Alone - Ep 157
Secureworld Atlanta just finished up.  Turns out cyber experts do agree about many of the same issues we discuss here.  Two days of discussions amongst CISOs, ISOs, security techies, etc. about what to worry about and what to do for cyber protections.  Yes, there was a lot of really nerdy discussions but the good news is the central themes do not require geek speak to share with you. Learn more at HelpMeWithHIPAA.com/157

Cyber Experts Agree We Are Not Alone - Ep 157

2018-06-0800:49:52

What data do you protect? - Ep 156
Have you considered that there are other valuable information assets to protect than just PHI?  Most healthcare privacy and security programs only focus on PHI and HIPAA requirements. If you are already doing the work why not include all of your valuable information assets.  It is time to ask yourself what data should we protect?   For more go to HelpMeWithHIPAA.com/156

What data do you protect? - Ep 156

2018-06-0100:37:01

Digital Spring Cleaning - Ep 155
This time of year many of us think about cleaning out closets and switching seasons.  By clearing out your digital clutter you can double check the security of your devices and reduce your attack surface at the same time.  Plus, it is way easier than cleaning out the old hall closet that may have monsters lurking in the back of it.  Make the time to clean your digital clutter at least once or twice a year and you will feel better for it.  Why not do digital spring cleaning, too? For more go to HelpMeWithHIPAA.com/155

Digital Spring Cleaning - Ep 155

2018-05-2500:51:49

Risk OR Gap Analysis THAT Is The Question - Ep 154
There is a frequent issue with people understanding what a Security Risk Analysis includes. In fact, there is so much confusion we often see documents presented as a risk analysis that is actually a gap analysis. It happens so often that OCR is trying to address it in their April newsletter. We are going to take a stab at explaining what gap analysis reports look like vs what a security risk analysis report really includes when done properly. For more information: HelpMeWithHIPAA.com/154

Risk OR Gap Analysis THAT Is The Question - Ep 154

2018-05-1800:46:54

5 HIPAA Cybersecurity Laws - Ep 153
Back in January, I read an article in Forbes titled: The Five Laws Of Cybersecurity.  When reading it I realized that it was a great message to our listeners but it needed a HIPAA flavor added it to it.  This episode we add our thoughts to his article and turn it into 5 Laws of HIPAA Cybersecurity. For more details HelpMeWithHIPAA.com/153

5 HIPAA Cybersecurity Laws - Ep 153

2018-05-1100:48:40

Don't accept candy from strangers - Ep 152
More news on the insider front makes it necessary to point out, again, how susceptible healthcare is to insider failures. HelpMeWithHIPAA.com/152

Don't accept candy from strangers - Ep 152

2018-05-0400:42:37

Physicians and Security Officers - Ep 151
The American Medical Association (AMA) did a survey of physicians and their thoughts about privacy and security practices. It was interesting to hear their responses. Also, when a group of Security Officers gets together for a chat some people glaze over.  For nerds like us, it is an exciting discussion. Today we are going to discuss the Security Officer panel topics and the AMA report presentation from the National HIPAA Summit. HelpMeWithHIPAA.com/151

Physicians and Security Officers - Ep 151

2018-04-2700:47:58

Ready for extreme vendor vetting? - Ep 150
Are you ready for extreme vendor vetting? Many vendors have been pushing back against any covered entity or business associate that asked them to answer questions about their privacy and security programs. They believe signing a business associate agreement (BAA) meets the legal requirements and that is all they must do. Well, the times they are a changing - again.  There are many different factors making it necessary to ask these type questions and not just accept a BAA as reasonable assurances. What are those factors and how things are changing are the topics we discuss in this episode.   For more go to HelpMeWithHIPAA.com/150

Ready for extreme vendor vetting? - Ep 150

2018-04-2000:45:25

National HIPAA Summit News - Ep 149
The National HIPAA Summit always features some interesting news from OCR concerning guidance, enforcement, and audits.  This year was no different. In this episode, we discuss the highlights as we interpreted them anyway. More at HelpMeWithHIPAA.com/149

National HIPAA Summit News - Ep 149

2018-04-1300:39:51

Cyberscary Trends - Ep 148
Cybersecurity trends sound scary when you hear us talk about some of this stuff.  Cyberscary is actually what we decided to call it.  The good news is we do talk about other things sometimes. There are two reports that came out in recent weeks have gotten my attention and just have to be discussed with you guys. More info at HelpMeWithHIPAA.com/148

Cyberscary Trends - Ep 148

2018-04-0600:47:07

Cybersecurity And The Law - Ep 147
Cybersecurity legal requirements keep changing at the state, federal, and international level.  Most of the changes are just trying to keep up with the constantly changing landscape of threats in cyberspace. Today we call in an expert, Mitzi Hill, to talk to us about those cybersecurity legal requirements.  How those changes may impact your business and your privacy and security program is certainly something we don’t want to lose track of in the mix. More information at HelpMeWithHIPAA.com/147

Cybersecurity And The Law - Ep 147

2018-03-3000:55:53

6 Listener Questions - Ep 146
We get questions from listeners on a pretty regular basis.  When they come in from an email we do our best to reply with an answer.  Sometimes they get backed up for us to get them on the show, however. Today we are covering some of those, in fact, we are covering 6 listener questions. HelpMeWithHIPAA.com/146

6 Listener Questions - Ep 146

2018-03-2300:48:11

Uber Health HIPAA - Ep 145
News abounds about Uber and other ride-sharing services taking people to their doctor appointments.  They say they have it covered and Uber Health HIPAA compliance is solid. Today we look at what they are saying about HIPAA here and what that means to us. More info at HelpMeWithHIPAA.com/145

Uber Health HIPAA - Ep 145

2018-03-1600:33:23

Does healthcare suck at cybersecurity? - Ep 144
If cybercrime truly is the number one problem with mankind and healthcare is the number one cyber attacked industry is it because healthcare sucks at cybersecurity? For more info HelpMeWithHIPAA.com/144

Does healthcare suck at cybersecurity? - Ep 144

2018-03-0900:34:13

Cyber issues around every corner - Ep 143
If it seems like cyber issues are around every corner these days, you aren’t imagining things. In episode 128 way back in November 2017, we discussed the fact that we thought there were signs of a coming cyber storm. Today we look at what is going on and see if we may actually be in the midst of that storm or is it still building. For more: HelpMeWithHIPAA.com/143

Cyber issues around every corner - Ep 143

2018-03-0200:43:03

Do I Need A Lawyer? - Ep 142
Information privacy and security requirements in various laws are coming up in legal cases more often these days.  Part of that is because we have more of those type laws. Although HIPAA has been in effect for over a decade, I don’t recall seeing it used in lawsuits and legal cases as frequently as I do now.  Maybe I am just paying more attention but there are certainly plenty of cases in the courts today.  Most are civil cases but some are even criminal cases.  After hearing these you will probably know the answer to the question “Do I need a lawyer”.   Probably, maybe, that is a fact-specific determination.  Honestly, though, the answer is you probably will if you are not taking information privacy and security seriously today. More at HelpMeWithHIPAA.com/142

Do I Need A Lawyer? - Ep 142

2018-02-2300:37:56

5 Breaches Equals 1 Big Settlement - Ep 141
As expected, OCR has continued to announce enforcement actions in 2018.  This one is a bit different than any previous resolution in that there are 5 different cases across multiple locations in a single organization. It is also important to note that all 5 of these issues data back to 2012.  Almost 6 years since the first one occurred, we have the resolution agreement.   HelpMeWithHIPAA.com/141

5 Breaches Equals 1 Big Settlement - Ep 141

2018-02-1600:48:09

HIPAA Made Easy? - Ep 140
HIPAA made easy is a topic we have discussed many times before but today we are going to cover it specifically.  So often we get requests for the “easiest way” to do HIPAA. This isn’t something to check off a list and have it done. It is something that you do every day as part of your business. The idea that you can make HIPAA easy is similar to saying that doing all of your accounting and taxes for your business is easy.  Maybe if there is one person to pay and that is you but handling your finances correctly isn’t something many people find easy. Yes, the data can be gathered and entered into systems.  But, do you know all the forms to complete, documents to save, follow up to do, classifications to determine, etc.  It isn’t easy but it is doable.  So is HIPAA.     For more HelpMeWithHIPAA.com/140

HIPAA Made Easy? - Ep 140

2018-02-0900:51:14

6 Cybersecurity Lessons In The News - Ep 139
Cybersecurity is in the news a lot lately. Particularly a lot of news just since the beginning of the year. As usual, we review all the news looking for important things to share with our clients and listeners.  There are just so many different stories to choose from this week, we decided to cover several of them in one episode.  So, here are 6 cybersecurity lessons in the news. Some of them may be things you saw before but all of them were worth discussing what we should be aware of and learn from all the information coming in for 2018. For more go to HelpMeWithHIPAA.com/139

6 Cybersecurity Lessons In The News - Ep 139

2018-02-0200:43:48

Cybersecurity Outside The Office - Ep 138
In December, the OCR newsletter was titled Cybersecurity While on Holiday.  First, how very British of them!  Second, is it just when on holiday?  The same rules apply anytime you are on the road with technology and access to the internet.  We see this as something you should review no matter when you plan to access information outside the office.  While some think the corner coffee shop is a great work space others work in hotels and conference rooms all over town without being on holiday at all.  In this episode, we review the suggestions in the newsletter but drill down a bit more into how much of this applies when you are working mobile from home or just down the street as well.   More at HelpMeWithHIPAA.com/138

Cybersecurity Outside The Office - Ep 138

2018-01-2600:48:36

OCR Ends 2017 With A Bang - Ep 137
At the beginning of 2017 OCR announced several settlements.  Then, the settlement announcements stopped in May as their were leadership changes that continue to happen.  In fact, the only reason this announcement seemed to come out was because it was included in a bankruptcy court filing earlier this month.   For more go to HelpMeWithHIPAA.com/137

OCR Ends 2017 With A Bang - Ep 137

2018-01-1900:44:22

Meltdown - Patch Baby Patch - Ep 136
Unless you never listen to nerd-speak you have to have heard the discussion about Meltdown and Spectre over the last few weeks. It is a perfect time to talk about what patch management really means in your cybersecurity protections.  We try our best to discuss it with less geek speak and more English.   For more info HelpMeWithHIPAA.com/136

Meltdown - Patch Baby Patch - Ep 136

2018-01-1200:35:18

7 Educated Guesses About 2018 - Ep 135
Here we go for another year!  It is amazing that this is the third new year we have covered on HMWH.  There are so many things that have happened over that time and as we head into 2018, so many things to look into our crystal ball and make 7 educated guesses about 2018.  We may not be predicting the future but we both have some opinions about what we see happening out there in the world of HIPAA, privacy, and cybersecurity in the coming months. Get more at HelpMeWithHIPAA.com/135

7 Educated Guesses About 2018 - Ep 135

2018-01-0500:40:19

Pay Now Or Pay Even More Later - Ep 134
Is HIPAA compliance expensive?  Or, is it short-sighted to only worry about what HIPAA compliance costs?  A new report from Ponemon Institute, The True Cost of Compliance with Data Protection Regulations, looks at compliance costs across several industries and multinational organizations. The study has a lot of details as we always expect from Ponemon Institute.   Read more at HelpMeWithHIPAA.com/134

Pay Now Or Pay Even More Later - Ep 134

2017-12-2900:46:20

2017 Blooper Episode - Happy Holidays
Each year Bojan Sabioncello, our audio engineer in Split, Croatia, puts together his blooper roll to mock us.  Granted, he spends the whole year having to listen to us without a chance to respond until now.  This his only chance to respond to a year’s worth of our comments and screw-ups. We will be back next week with a new episode.   Happy Holidays from the whole Help Me With HIPAA team!

2017 Blooper Episode - Happy Holidays

2017-12-2200:13:29

Cybersecurity Naughty List 2017 - Ep 133
As 2017 comes to a close, we are making our lists and checking them twice.  Time to find out who we thought was more naughty than nice this year.  The Naughty List 2017 discussion includes everything from big news data breaches such as Equifax and Uber down to stolen hard drives and password issues.  Feel free to add your naughty list nominations in the comments. More info at HelpMeWithHIPAA.com/133

Cybersecurity Naughty List 2017 - Ep 133

2017-12-1500:36:49

Five Phishing Findings From Google - Ep 132
A new report on phishing was recently released titled: Data Breaches, Phishing, or Malware? Understanding the Risks of Stolen Credentials. The report of findings from a study that was done by Google, University of California, Berkeley, and the International Computer Science Institute.  It was a year-long study of account hijacking, stolen credentials, phishing and malware attacks.  The findings are clear that phishing is a problem in ways we may not have thought before now.  In the study, the researchers followed other hacker methods used against email addresses they found on the darknet sites for sale. The search netted 12.4 million addresses that were determined to be potential victims of phishing kits out of the total 1.9 billion usernames and passwords exposed by data breaches. So, it is obvious that this isn’t a tiny study over a short amount of time. For more info go to HelpMeWithHIPAA.com/132

Five Phishing Findings From Google - Ep 132

2017-12-0800:51:39

SOC2 certification is not HIPAA compliance - Ep 131
Recently, we have dealt with our clients struggling with vendors in the vetting process. Particularly, tech vendors of any sort. Many vendors have written off the HIPAA compliance requirements by simply saying “We are SOC2 compliant so you don’t have to worry about anything”. Often that is said by sales and management folks with a great deal of confidence. After spending some time at a recent HITRUST meeting I heard just how many people shouldn’t be so confident when making that statement. As with anything else the devil is in the details. What does SOC2 mean and how can you tell if that really means anything to you? Trust but verify is the key to answering that question for yourself. More info: HelpMeWithHIPAA.com/131

SOC2 certification is not HIPAA compliance - Ep 131

2017-12-0100:47:40

Black Friday Replay 8 Common HIPAA Myths
We are enjoying the holiday with our families.  But, we didn't want to miss a chance to share time with our listeners.  Today we are replaying one of our favorite episodes 8 Common HIPAA Myths.

Black Friday Replay 8 Common HIPAA Myths

2017-11-2400:46:14

5 Things To Do Before Year’s End - Ep 130
Hard to believe another year is coming to an end. It is time to review 2017 and plan for 2018.  That means it is time to make your list of 5 Things To Do Before Year’s End. Just in case you need some help with that list, we made one for you!   HelpMeWithHIPAA.com/130

5 Things To Do Before Year’s End - Ep 130

2017-11-1700:44:57

Text messaging is not secure by default - Ep 129
Text messaging is often the preferred method of communication for many people today.  It does have great advantages with its simplicity, instant delivery, and convenience.  However, I did not mention security on that list.  Text messaging is not secure by default.  Yes, you can secure it but that requires apps, platforms, and planning.  The bottom line is the communication method most people call text messaging is not secured enough to send and receive PHI without patient authorization to use it. For more info HelpMeWithHIPAA.com/129

Text messaging is not secure by default - Ep 129

2017-11-1000:40:16

Is there a cyber storm brewing? Ep 128
Lately, there have been a lot of articles in the "nerd news" services about various problems and vulnerabilities looming on the horizon or happening right now.  Usually, there are one or two in a normal week or so that really get our attention.  The last few weeks though it seems a bit different.  Maybe it is just noise or paranoia created to drive traffic to sites.  But, sometimes it becomes overwhelming enough to take time to step back and look at the details as a whole and determine what you really are seeing here.  So, today we discuss:  is there a cyber storm brewing on the horizon? More info at HelpMeWithHIPAA.com/128

Is there a cyber storm brewing? Ep 128

2017-11-0300:51:30

HIPAA Horror Stories V3 Ep - 127
Each year we have done a special scary episode for Halloween.  Last year we took you on a tour of a haunted house.  This year for HIPAA Horror Stories V3 we get to hear a campfire horror story.  So gather around and hear how scary HIPAA mishaps can be for us all! For more info go to HelpMeWithHIPAA.com/127

HIPAA Horror Stories V3 Ep - 127

2017-10-2700:35:27

Social Media, Marketing, and HIPAA - Ep 126
When it comes to social media, marketing, and HIPAA things can get a little dicey. There are certainly many cases where using social media has gone awry in health care cases.  However, when handled correctly, you can actually use social media, marketing, and HIPAA in a sentence without getting chills down your spine.  Today, Janet Kennedy joins us for a discussion on the positive reasons you should be active on social media and the precautions you should take to make sure everything stays in a positive light. More at HelpMeWithHIPAA.com/126

Social Media, Marketing, and HIPAA - Ep 126

2017-10-2000:49:06

On-boarding and Termination Checklists - Ep 125
During the onboarding and termination process is where many mistakes are made that lead to security incidents and even reportable breaches.  Today we discuss why they are important and the kinds of things you should consider having in yours. For more information HelpMeWithHIPAA.com/125

On-boarding and Termination Checklists - Ep 125

2017-10-1300:48:28

Talk To The Boss About HIPAA - Ep 124
How do you talk to the boss about HIPAA? That is a regular question we get around here.  The staff responsible for compliance gets trained and understands what needs to be done but they don't get leadership support.  Over the years we have had to have those conversations many times.  It is never easy but there are some key pointers to making ground with your argument and turning the tide for supporting your efforts.  Today we cover a few of our ideas on how to broach the subject effectively when you need to talk to your boss about HIPAA. More details at HelpMeWithHIPAA.com/124

Talk To The Boss About HIPAA - Ep 124

2017-10-0600:44:35

OCR Audit Updates Phase 2 - Ep 123
During the NIST OCR HIPAA Security Conference we covered in the last two episodes, there was also a session on OCR Audit Updates. OCR gave an update on the information gleaned so far from the compliance desk audits that were started in 2016. Their presentation included some interesting details. Today we cover the information they shared so you can compare and contrast those details against your own program. For more details HelpMeWithHIPAA.com/123

OCR Audit Updates Phase 2 - Ep 123

2017-09-2900:35:18

NIST and OCR Security Conference Part Deux – Ep 122
This is the second episode covering the things David has to share from the Safeguarding Health Information conference. There are many great points he picked up. As we review them we keep coming back to the reminder that HIPAA is about patient care now.  Join us as we discuss everything from ransomware requirements to security for a small practice on this episode. More info at HelpMeWithHIPAA.com/122

NIST and OCR Security Conference Part Deux – Ep 122

2017-09-2200:56:47

NIST and OCR Security Conference - Ep 121
The annual NIST and OCR security conference has come around again.  This year, David attended the conference via webcast and shares his notes on the first day of the conference.   Before the conference discussion, we have to touch on the announcement from Equifax about their HUGE data breach. For more information go to HelpMeWithHIPAA.com/121

NIST and OCR Security Conference - Ep 121

2017-09-1900:48:21

Disaster Recovery Preparations Ep - 120
We recorded this episode on the day that Harvey was hitting Houston and had no idea just how bad that disaster would eventually become for those on the gulf coast.  On the day we publish this episode, we are both personally involved in the evacuations and preparations in advance of Irma. She is forecast to hit Florida, Georgia, and the Carolinas in the next few days. The timing for this discussion could not be more appropriate from a news perspective but this planning should have already taken place prior to this date for those in the paths of these deadly storms.   As you listen to this episode, know that we had no idea just how bad things were about to become for the millions of people under the stress of these major natural disasters.  Take care in your planning now if you haven't been in these areas, your turn may be next and there is no way you want to be dealing with anything similar without a plan. What do you have in your disaster recovery plans? For more info HelpMeWithHIPAA.com/120  Email us at contact@HelpMeWithHIPAA.com

Disaster Recovery Preparations Ep - 120

2017-09-0800:42:01

Should I use a local, data center, or cloud server? - Ep 119
Every time we discuss server security issues it opens a debate about where is the best place to keep your servers.  There are three options and we are going to discuss them today.  Local hosting vs data center hosting vs cloud servers under HIPAA. For more details HelpMeWithHIPAA.com/119 email us: contact@helpmewithhipaa.com

Should I use a local, data center, or cloud server? - Ep 119

2017-09-0100:53:52

What is reasonable and appropriate? Ep 118
What is reasonable and appropriate? The HIPAA legal reference and guidance mentions reasonable and appropriate all over the place. Many times that concept creates confusion. How do you determine what is reasonable or appropriate for any environment? More at HelpMeWithHIPAA.com/118

What is reasonable and appropriate? Ep 118

2017-08-2500:42:42

Alexa Plus HIPAA Plus Other Questions - Ep 117
Can a doctor have Alexa in OR to play music?   Is it a HIPAA violation for staff to look at their own records or is it an internal policy violation? I am a small company BA do I really have to do all of HIPAA compliance requirements? If I know my upstream BA or CE isn't following their HIPAA compliance obligations what am I legally obligated to do? Why would you make daily copies of your visitor logs? More info at HelpMeWithHIPAA.com/117

Alexa Plus HIPAA Plus Other Questions - Ep 117

2017-08-1800:46:57

Security Incident Investigations Find More Than Expected - Ep 116
Sometimes following the news lets you find things like security incident investigations with interesting details.  But, these cases were different than most.  Even better than that, we learned how can a fish tank help hackers!  There were just too many parts of these stories that got my attention to pass them up.  When something occurs and the investigation uncovers way more to the story than you normally see we should all learn from them. More details at HelpMeWithHIPAA.com/116

Security Incident Investigations Find More Than Expected - Ep 116

2017-08-1100:43:46

Incident Response Plans V2 - Ep 115
Incident response plans have been a topic of our show several times. But, these days we just can't get enough of a good thing! Actually, there is a reason we are covering it in this episode.  I was reviewing a Business Associate Due Diligence from a software provider. In the questionnaire, we always ask if you have a written incident response plan and trained incident response team. They responded Yes, with a comment of "we have an engineering department". More info at HelpMeWithHIPAA.com/115

Incident Response Plans V2 - Ep 115

2017-08-0400:45:46

Compliance Officer Personal Liability? - EP 114
There has always been a concern from many people we work with about compliance officer personal liability. Specifically, is a compliance officer personally liable for the compliance of the company? The recent settlement agreement between the FTC and the Chief Compliance Officer of Moneygram has created interesting conversations for compliance circles. In this case, the Chief Compliance Officer of Moneygram was able to reach a settlement in the liability case against him but it included a $250,000 penalty payment and 3 years restriction on working in that industry. Yep, that is enough to make you sit up and take notice. More details at HelpMeWithHIPAA.com/114

Compliance Officer Personal Liability? - EP 114

2017-07-2800:37:44

OCR Mic Drop For Cloud Providers - EP 113
The monthly OCR Cyber Newsletter for June had some interesting points.  The fact that OCR mentions multiple times and in multiple ways that they do not endorse, certify, or recommend specific technology or products should serve as their "OCR mic drop moment" on this discussion.  We can dream, can't we!  Today we are going to review that newsletter and how they have pointed these things out once again. Before we close out the episode we are also covering some questions and comments from listeners.  Hang around for those just after the 30-minute mark. More info at HelpMeWithHIPAA.com/113

OCR Mic Drop For Cloud Providers - EP 113

2017-07-2100:50:57

NotPetya, Windows, and Ransomware - Ep 112
This is not another episode about preventing and responding to the NotPetya ransomware. There are countless articles about those topics.  We are discussing the bigger picture today.  In this episode, NotPetya, Windows, and Ransomware, we discuss what happened in the case but also what does all of this really mean in the big picture of cyber attacks.  If you don't stay proactive in evaluating what the criminals may do next then you don't have a chance of being anything but reactive. In light of these recent global attacks, we have many questions.  Are we experiencing a shift in the criminal's intentions or are they just bumbling around with new toys?  If is it no longer just about taking our money then what is really about?  If you haven't cared about protecting your data so far, how about protecting your data from becoming a pawn in the latest cyberwarfare battle? For more information go to HelpMeWithHIPAA.com/112

NotPetya, Windows, and Ransomware - Ep 112

2017-07-1400:40:40

Breach reporting costs and decisions for 2017 - Ep 111
In June, the NY State Attorney General announced a settlement with CoPilot, a healthcare services company that illegally deferred notice of breach of more than 220,000 patient records.  Another annual report was also just released with the latest numbers : 2017 Cost of a Data Breach Study from Ponemon Institute and IBM.  Today, we are going to discuss how the two of them can help us all make better decisions where potential breaches of PHI are concerned.  Breach reporting costs and decisions in 2017 are proving to be something you should understand before a crisis, not after one hits. For more info: HelpMeWithHIPAA.com/111

Breach reporting costs and decisions for 2017 - Ep 111

2017-07-1400:48:17

Google Play
Download from Google Play
Castbox
Download from App Store
usUnited States
00:00
00:00
1.0x

0.5x

1.0x

1.5x

2.0x

3.0x

What is reasonable and appropriate? Ep 118

What is reasonable and appropriate? Ep 118