Google is Dangerous

in HIPAA Headlines by John Brewer Leave a comment

This is for the paranoid out there, and if you are a physician, you need to be paranoid about how your practice handles patient health information (PHI). Cloud computing is the hip, in-thing right now. Cloud storage is where things can get tricky…note: you better have a HIPAA office policy on this matter. What is Read More

HIPAA Whistleblowers

in HIPAA Headlines by John Brewer Leave a comment

Just like in any profession, there is a desire by the government to have whistle-blowers. A whistle-blower makes the job of policing much easier for the government. The whistle-blower will get job protection (if they want to stay on) and typically a percentage of any fines.  Remember, HIPAA fines can be huge! Let’s take a Read More

Emory Data Breach, Same Old Excuses

in HIPAA Headlines by John Brewer Leave a comment

Does anyone know the #1 reason for a PHI data breach? That’s right, a lost or stolen storage device that is not encrypted. Follow on question: what is the only Safe Harbor for a lost or stolen storage device? Encryption! So, the worst offender is an un-encrypted storage device, yet one of the easiest things Read More

The Cloud and HIPAA

in HIPAA Headlines by John Brewer Leave a comment

You know you’ve heard this term used, “The Cloud” is a favorite right now. Salespeople use it to sound cool. End users say it to sound cool. Every web startup out there uses it to sound relevant. For most practices, The Cloud can be used in two ways: You use a web based, software as Read More

My PHI Breach Part 1

in HIPAA Headlines by John Brewer Leave a comment

It is not unusual for me to rant here about the ridiculous level of recklessness the medical community has for our PHI. Specifically, the easiest thing to point out, as it happens all the time, is the “theft” (or loss) of a portable storage device. For those keeping score, a portable storage device is anything Read More