Last month, the Office of Civil Rights announced three settlements with dental practices involving patient requests for copies of medical records. OCR noted in its press release that “these … actions send an important message to dental practices of all sizes that are covered by the HIPAA Rules.”
Continue readingAs the NY Times article and related AOL video demonstrate (links below), baby photographs are protected to the same extent as medical records, Social Security Numbers and other types of individually identifiable information. The Health Insurance Portability and Accountability Act (HIPAA) protects all individually identifiable health information held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper or oral. This is known as “protected health information (PHI).” See 45 C.F.R. § 160.103. Continue reading
New York insurer Affinity Health Plan will pay $1.2 million to resolve allegations it breached HIPAA by returning leased photocopiers without deleting all information from the hard drives of the copiers that contained protected data involving 345,000 patients, federal regulators said on Wednesday, August 14. Affinity reported the breach as required by the breach notification rules in the HITECH Act of 2009 and Omnibus Rule released this year.
Affinity learned of the breach from reporters at CBS Evening news, who purchased one of the copiers and discovered ePHI on the hard drives. This is another harsh reminder that copy machines are a frequent source of unsecured PHI that is not generally scrubbed by the health care provider.
Affinity entered into a Corrective Action Plan that addressed their failure to provide physical safeguards outlined in the Security Rule, lack of a proper risk analysis to determine potential vulnerabilities, as well as insufficient policies and procedures applicable to the issue. “This settlement illustrates an important reminder about equipment designed to retain electronic information: Make sure that all personal information is wiped from hardware before it’s recycled, thrown away or sent back to a leasing agent,” said Leon Rodriguez, director of HHS’s Office for Civil Rights.
Written by: Stephen Angelette
bswhealthlaw.com 