On March 20, 2020, the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) published Guidance and a list of FAQs related to the provision of telehealth
Continue Reading Dos and Don’ts from OCR’s Guidance and FAQs on Telehealth and HIPAA
Elizabeth G. Litten
COVID-19 Update: Limited Waiver of HIPAA Sanctions and Penalties for Certain Hospitals
Effective March 15, 2020, certain hospitals that fail to comply with specific HIPAA Privacy Rule requirements will not be subject to HIPAA sanctions and penalties, according to a “COVID-19 …
Continue Reading COVID-19 Update: Limited Waiver of HIPAA Sanctions and Penalties for Certain Hospitals
HIPAA and COVID-19: ABCs For Working From Home
If your company is a covered entity or a business associate, you face unique challenges when workforce members ask or are required to work from home. Hopefully, your company’s HIPAA…
Continue Reading HIPAA and COVID-19: ABCs For Working From Home
More for Employers re: HIPAA Privacy and COVID-19
The FAQs included in my prior post address employer response with an eye to HIPAA compliance. What else can an employer do or not do with employee information related to…
Continue Reading More for Employers re: HIPAA Privacy and COVID-19
FAQs on HIPAA Privacy and COVID-19
Fox Rothschild partner Bill Maruca’s article, “Protecting Privacy During an Infectious Disease Panic”, is (unfortunately) as relevant today as it was when it was posted here more than 5 years…
Continue Reading FAQs on HIPAA Privacy and COVID-19
Does the HIPAA Concept of De-identification Serve to Adequately Protect the Privacy of all Personal Health Information?
Fellow Fox Rothschild LLP Partner (and former hospital system General Counsel) Salvatore J. Russo generously contributed this post.
Some twenty-three years ago, the first well-publicized incident of the re-identification of…
Continue Reading Does the HIPAA Concept of De-identification Serve to Adequately Protect the Privacy of all Personal Health Information?
Tell Me Again: What Can Covered Entities (or their Business Associates) Charge for Medical Records Requests?
The answer to this question has changed yet again. I’ve blogged on this topic several times in the past (see here, here and here), and described the question…
Continue Reading Tell Me Again: What Can Covered Entities (or their Business Associates) Charge for Medical Records Requests?
HIPAA versus FERPA: New Joint Guidance Highlights Emergencies and Complexities
More than eleven years have passed since the U.S. Department of Health and Human Services (HHS), the agency responsible for the privacy of protected health information under HIPAA, and the…
Continue Reading HIPAA versus FERPA: New Joint Guidance Highlights Emergencies and Complexities
The California AG May Be Watching You, Covered Entity
As Fox partner Odia Kagan posted yesterday, early enforcement of CCPA will focus on data related to kids. In addition, according to a recent article in the San Francisco Chronicle…
Continue Reading The California AG May Be Watching You, Covered Entity
Clear Message from OCR: Don’t Ignore (or Overcharge for) Patient Requests for Records
Last week, the Office for Civil Rights (OCR) announced its second enforcement action and settlement with a provider for failing to comply with HIPAA’s patient access requirements. Korunda Medical, LLC,…
Continue Reading Clear Message from OCR: Don’t Ignore (or Overcharge for) Patient Requests for Records