-
Who needs HIPAA?
- April 11, 2017
- Posted by: Public Affairs
- Category: Blog
No Comments
We started GoldSky with the intention of educating small and medium business owners about both security and compliance. Security means – in rough terms – doing what’s necessary to protect your organization’s data and resources. Compliance, be it private or public, is intended to ensure that organizations handle certain data securely. In healthcare, we often
-
Luck or Security in the Digital Age?
- March 20, 2017
- Posted by: Ron Frechette
- Category: Blog
My partner and I recently visited with a physician who runs a thriving primary care practice in an affluent retirement community to discuss the state of his practice’s IT security program. He reached out to us after receiving an inquiry about whether his practice was HIPAA compliant. The practice consists of himself, a small team of
-
Ransomware Considered a HIPAA Breach
- November 2, 2016
- Posted by: Public Affairs
- Category: Blog
OCR has recently made it clear that being attacked by ransomware is considered a breach under the HIPAA Security rule. Your response, however, may be based on your investigation. Ransomware is a form of malware that is most commonly seen in the form of a cryptolocker variant. When one of these variants infects a computer,
-
Cloud Computing and HIPAA Compliance
- October 19, 2016
- Posted by: Public Affairs
- Category: Blog
The cloud has undoubtedly brought about a new era of efficiency in computing. As healthcare providers increasingly move to the cloud, they need to be aware of their obligations under the HIPAA Security and Privacy rules, as these cloud service providers (CSP) are most often considered business associates. If you remember from a previous post,
-
What are HIPAA Business Associate Agreements
- September 30, 2016
- Posted by: Public Affairs
- Category: Blog
Business Associate Agreements are contracts executed between a HIPAA covered entity (e.g. a provider) and a third party “business associate” who might reasonably have access to ePHI (e.g. an attorney or a transcription service provider). These agreements (or BAAs as they’re called), specify the security and privacy responsibilities between the CE and the BA. Why
-
Developing a Proper Security Risk Analysis (HIPAA)
- July 5, 2016
- Posted by: Public Affairs
- Category: Blog
Several years ago, the HIPAA Security Rule brought about a wave of new regulations intended to strengthen the security of electronic protected health information (e-PHI). A number of these regulations refer to performing a “risk analysis.” But, what does that mean? The regulations specify that a covered entity that creates, receives, maintains, or transmits e-PHI