Regulatory Due Diligence – Critical for Healthcare Mergers and Acquisitions
Companies see tremendous return on investment (ROI) for employing the right experts Mergers and Acquisitions (M&A) are taking place at…
Internal Auditing as a Friend, Not a Foe
Tips on how internal auditing can assist compliance programs A turf war between internal audit committees and compliance offices is…
OCR Reiterates Direct Liability Authority Over Business Associates
Ten ways BAs are directly liable for HIPAA violations The HITECH Act made business associates (BA) of covered entities directly…
For 2019 HIPAA is the Highest Compliance Officer Priority
75% of Compliance Officers are responsible for HIPAA Privacy The Ninth Annual Healthcare Compliance Benchmark Survey (Survey) was conducted by…
New DOJ Evaluation of Corporate Compliance Program Guidelines
In the latest in a series of Department of Justice (DOJ) moves to clarify its expectations for compliance programs and…
Clock Ticking on The California Consumer Privacy Act
The California Consumer Privacy Act (“CCPA”) will impose significant transparency and individual rights requirements on many companies that handle “personal information” of…
FBI Report on Cyber-Crime Extortions
In 2018, the Federal Bureau of Investigation (FBI) reported receiving 51,146 extortion-related cyber-crime complaints that involved adjusted losses of over $83 million.…
Compliance Offices Are Assuming Additional Responsibilities
Most have taken on responsibilities for HIPAA Privacy and Internal Audit For many organizations, the Compliance Officer is a convenient…
OCR’s New Cybersecurity Newsletter Provides Insight into Two Cybersecurity Threats
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently released a “Spring 2019 OCR Cybersecurity…
Most Organizations Do Not Have Their Compliance Programs Independently Evaluated for Effectiveness
Many seem to confuse ongoing compliance program monitoring with auditing Compliance Officers can’t independently audit their own programs Only an…
Mitigating Unauthorized Disclosures of PHI by Employees or Former Employees
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently submitted two reports to select congressional…
OCR Focusing on Enforcing Patients’ Rights to Access
In a Bloomberg Law article regarding last month’s National Health Insurance Portability and Accountability Act (HIPAA) Summit, reporter James Swann…