While details have not been made public, it is possible that a properly configured robots.txt file could have prevented the patient data exposure which was the genesis of the recent $4.8 million HIPAA settlement made by New York-Presbyterian Hospital/Columbia University Medical Center (see: http://cynergistek.com/columbia-presbyterian-settle-hipaa-violations-for-4-8-million/). From the information which was made […]
Health Law Alert
Whatever Happened to Section 6032(a)(3) of the Deficit Reduction Act of 2005?
Remember the Deficit Reduction Act of 2005? It made certain Medicaid providers subject to additional compliance requirements, causing them to amend their compliance policies and add procedural steps. Now, nine years after its enactment, some state Medicaid agencies are checking on compliance through questionnaire audits. To refresh your memory: Section […]
Patient Portal Q & A: Part 1
As hospitals and physician offices are rapidly rolling out patient portals in an effort to meet the requirements of the Meaningful Use program, we are seeing some common legal and practical issues and questions surface. This first article in a multi-part series will address a few of the most common […]
End User Encryption and HIPAA
Note: This is the second article in a two-part series on HIPAA and data security and encryption. The June edition of the Health Law Advisory included an article by Michael Chase discussing recent HIPAA settlements due, at least in part, to a failure to properly encrypt PHI. One of the […]
“Standard” Construction Documents – Some Traps for the Unwary
Beginning a major construction project can be an exciting time for an organization. During this time, there are a multitude of decisions that need to be made – programming, budgeting, financing and architect and contractor selection, to name a few. One of the most important decisions an owner can make […]