::HipaaBulletin:: http://www.hipaabulletin.com HipaaBulletinDescription en-us Copyright 2004, Health Resources Publishing, Inc. dbrateris@mac.com Thu, 20 Nov 2008 05:21:52 EST Thu, 20 Nov 2008 05:21:52 EST News WebObjects 5.2.3 http://blogs.law.harvard.edu/tech/rss/ Report: Electronic Medical Records Have Potential for Misuse http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=80 YONKERS, N.Y.,-- An investigation in the March 2006 issue of Consumer Reports magazine has found that a national system of Electronic Health Records (EHRs) being developed by the federal government, states, HMOs, and PPOs to link the medical records of every American has potential for abuse. The Consumer Reports article found that while such electronic medical records systems could save lives and billions of dollars in health-care spending, it may also jeopardize the security of personal health care information. Mon, 27 Mar 2006 00:00:00 PST When covered entities may disclose protected health information without authorization http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=83 The HIPAA Privacy Rule recognizes the legitimate need for public health authorities and others responsible for ensuring public health and safety to have access to protected health information to carry out their public health mission. Mon, 27 Mar 2006 00:00:00 PST Looking Beyond HIPAA & Sarbox http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=82 We’ve heard of the Health Insurance Portability and Accountability Act of 1996 and the Sarbanes-Oxley Act, and our IT departments and data center managers are complying (we hope). But what should be made of the other regulations out there? Your organization has a responsibility to its clientele as well as to its employees to remain abreast of all relevant laws and directives. Compliance with these lesser-known regulations is mandatory also.... Mon, 27 Mar 2006 00:00:00 PST Patient Safety, Electronic Records Among Top List of Healthcare Priorities http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=84 SAN DIEGO -– The customer – make that the patient – is king, or should be, suggest results of an annual survey of healthcare information technology (IT) executives, who put patient satisfaction and safety at the top of the list of their business priorities. Patient satisfaction, they said, is the business issue that will have the most impact on healthcare in the next two years, followed by Medicare cutbacks and reducing medical errors, in the 17th Annual HIMSS Leadership Survey sponsored by ACS Healthcare Solutions. Mon, 27 Mar 2006 00:00:00 PST WEDI Audiocast: Electronic Claim Attachments – Where to Begin April 5 http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=81 WEDI is sponsoring an audio conference on "Electronic Claim Attachments – Where to Begin" April 5. Among the topics scheduled to be covered during the 90-minute program are the current claims adjudication environment, ROI for electronic claim attachments, provisions of the Proposed Rule (including attachment types), and coding structures used to request and submit attachment information (LOINC.) Mon, 27 Mar 2006 00:00:00 PST NewYork-Presbyterian Hospital Selects Product To Protect Its Internal Network http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=79 NEW YORK -- NewYork-Presbyterian Hospital has selected the CounterStorm-1 product to protect the hospital's internal network. CounterStorm, is the maker of an internal network security solution that effectively stops zero-day and targeted attacks in seconds. Mon, 27 Mar 2006 00:00:00 PST Is an individual’s authorization required to use or disclose PHI to an interpreter? http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=78 Must a covered health care provider obtain an individual’s authorization to use or disclose protected health information to an interpreter? Mon, 11 Jul 2005 00:00:00 PST CMS Sets Plans For HIPAA Roundtable http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=77 The Centers for Medicare & Medicaid Services (CMS) said it will host a National HIPAA National Provider Identifier (NPI) Roundtable conference call September 14, 2005. Mon, 11 Jul 2005 00:00:00 PST New E-mail Security Mechanism for HIPAA and Business Compliance http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=75 TEMPE, Ariz., -- Attach Plus, a premier developer of secure document encryption tools for e-mail attachments, announced today the availability of Attach Plus 2.2.7 for major e-mail clients. Attach Plus brings the advanced features of PDF and ZIP encryption within reach of the average business desktop user and complies with the HIPAA requirement "Technical security mechanisms" 45 CFR Part 142, S 142.308 (d) for medical records sent via the Internet. Mon, 11 Jul 2005 00:00:00 PST New HIPAA Regulations In Effect This Month http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=76 Sunrise, FL -- Final regulations on employee group plan coverage under the federal Health Insurance Portability and Accountability Act (HIPAA) that were enacted last December were to go into effect July 1 for most employers using non-calendar-year health plans. Mon, 11 Jul 2005 00:00:00 PST VeriSign Introduces the VeriSign(R) Security Certification Program to Help Enterprises Meet Strict Regulatory and Business Security Compliance Requirements http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=74 WASHINGTON -- VeriSign introduced the VeriSign(R) Security Certification Program. The program is designed to both assess an enterprise's information security program and certify it meets VeriSign's requirements, which are based on best practices drawn largely from a variety of international regulatory and industry compliance requirements. The certification can also be performed at a business unit, infrastructure or application level. Tue, 28 Jun 2005 00:00:00 PST Survey: Network Administrators are Comfortable With Security at Their Organizations; Concerned About Their Users http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=73 BINGHAM FARMS, Mich. --One year ago, in a VanDyke Software-commissioned survey of 335 network/systems administrators and networking managers that asked the survey takers what "keeps them up at night," respondents indicated a lack of insomnia and a hefty amount of complacency. This year, Amplitude Research again surveyed network professionals and their responses indicated a Tue, 14 Jun 2005 00:00:00 PST HIPAA Solution: Wireless Computers on Wheels (COWs) http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=72 PHILADELPHIA -- InfoLogix, Inc., and HealthCast Inc., a provider of enterprise single sign-on and workflow solutions for hospitals, announced a new offering in which InfoLogix will provide HealthCast's eXactACCESS on their wireless mobile pc carts. eXactACCESS is a single sign-on (SSO) with multiple shared workstation solutions designed specifically to improve the speed to access patient information in hospitals. Tue, 14 Jun 2005 00:00:00 PST SURVEY SHOWS HEALTHCARE ORGANIZATIONS ACHIEVING GREATER HIPAA COMPLIANCE BUT CHALLENGES REMAIN http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=70 The number of hospitals and health systems achieving full compliance with the Health Insurance Portability and Accountability Act (HIPAA) privacy rule has nearly doubled in the past year—rising from 23 percent to 40 percent—according to a survey conducted by the American Health Information Management Association (AHIMA). Tue, 31 May 2005 00:00:00 PST New Xerox DocuShare Solutions Catalog Helps Businesses Match Their Document Problem to a Partner Who Can Solve It http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=71 The value of having a customized DocuShare Partner solution is apparent for customers like Weill Medical College of Cornell University in New York City, where administrators use a DocuShare application to address critical Health Insurance Portability and Accountability Act (HIPAA) requirements for managing patient privacy acknowledgements. They use an automated process integrating Xerox hardware and software with a reseller solution available in the catalog. Tue, 31 May 2005 00:00:00 PST Tools and Advice on Developing Culture of Privacy and Security http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=68 URAC, in conjunction with the National Institute of Standards and Technology (NIST), the Workgroup for Electronic Data Exchange (WEDI), and the Healthcare Information and Management Systems Society (HIMSS), has completed a Crosswalk of security requirements focused specifically on the Health Insurance Portability and Accountability Act (HIPAA). The Crosswalk was developed to perform a gap analysis against security requirements already in place, eliminating duplicative efforts and documentation, achieving cost efficiencies and fully complying with all security mandates. Sat, 28 May 2005 00:00:00 PST NO PRIVATE LAWSUITS UNDER FEDERAL HIPAA LAWS, COURT HOLDS http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=69 Private parties cannot bring lawsuits against the press under HIPAA, the federal health information privacy law, a Colorado federal court recently ruled. (University of Colorado Hospital Authority v. Denver Publishing Co., Aug. 2, 2004.) If followed by other courts, this decision will diminish one potential source of claims against the media for reporting information related to hospital patients. The privacy provisions of the Health Information Portability and Accountability Act generally forbid health-care providers and insurers from disclosing, without consent, medical information about particular patients. Sat, 28 May 2005 00:00:00 PST NATIONAL PROVIDER IDENTIFIER (NPI) ENUMERATOR CONTRACTOR SELECTED BY CMS http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=67 Fox Systems, has been selected by The Centers for Medicare & Medicaid Services (CMS) as the contractor to perform the support operations for the the new standard unique health care provider identification (NPI) project. Sat, 28 May 2005 00:00:00 PST Blue Cross/Blue Shield of North Dakota Selects SenSage's Security Information Management Solution to Meet the Audit Control Requirements of HIPAA http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=3 SAN FRANCISCO, Dec. 3 /PRNewswire/ -- SenSage announced that Noridian, also known as Blue Cross/Blue Shield of North Dakota, has implemented SenSage's comprehensive Security Information Management (SIM) solution to protect patient information in accordance with the mandates of the Health Insurance Portability and Accountability Act (HIPAA). Like all publicly held healthcare organizations including hospitals, medical groups and insurers, Noridian is subject to the HIPAA audit control requirements. These stringent requirements Thu, 26 May 2005 00:00:00 PST ARCSIGHT INTRODUCES INFORMATION SECURITY COMPLIANCE SOLUTION FOR HEALTHCARE INDUSTRY http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=58 CUPERTINO, Calif.–– ArcSight, Inc., announced the introduction of ArcSight ESM Healthcare Edition, which allows healthcare payors, providers and clearinghouses to quickly and clearly streamline security management practices for their unique environment. These practices include risk management, systems review, monitoring and incident response. Thu, 26 May 2005 00:00:00 PST AMGA Selects SecureCARE Technologies HIPAA Document Exchange - E-Signature Technology http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=25 AUSTIN, Texas, Jan. 10 /PRNewswire-FirstCall/ -- SecureCARE(TM) Technologies, Inc. said that as a result of its executive corporate partnership with The American Medical Group Association (AMGA), several prominent AMGA members have begun to implement the company's HIPAA-ready, Internet-based electronic document exchange and e- signature solution. Thu, 26 May 2005 00:00:00 PST Facing April 20 HIPAA Security Rules, Many Physicians Lack Data Backup Plans and Access Controls http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=66 DALLAS -- Facing an April 20 deadline on new federal health information security standards, many small physician practices face gaps in three key areas, according to MedSynergies. Thu, 14 Apr 2005 00:00:00 PST iMedica Awarded U.S. Patent for Data Security System http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=65 DALLAS--iMedica(R)Corporation was awarded a U.S. Patent for the data security system used in its PhysicianSuite(R) electronic medical record and the upcoming iMedica Patient Relationship Manager(TM) 2005. As the patent states, iMedica's security design and method "ensure patient confidentiality while allowing patient medical records to be accessed over a network such as the Internet." Thu, 14 Apr 2005 00:00:00 PST Is HHS going to actually review & approve all Administration Simplification Compliance Act(ASCA) compliance plans? http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=63 Submission of a properly completed compliance extension plan is sufficient to secure the one-year extension. ASCA requires that a sample of the plans will be provided to the National Committee on Vital and Health Statistics (NCVHS), an advisory committee to the Secretary of Health and Human Services. Wed, 30 Mar 2005 00:00:00 PST Largest Worldwide Deployment of Windows Mobile-Based Pocket PCs Uses Secure Mobile Medical Information http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=64 MOKENA, Ill. -- Pointsec, a provider of the de facto standard for enterprise security software for laptop and desktop PCs, PDAs and smartphones, announced it will provide endpoint security technology for the U.S. Army's Medical Communications for Combat Casualty Care (MC4). Wed, 30 Mar 2005 00:00:00 PST CMS National HIPAA Security Roundtable http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=62 CMS will host a National HIPAA Security Roundtable conference call April 13 at 2:00PM ET. The call in number is 1-877-203-0044 and the identification number is 4587639. No cost or registration required. www.cms.hhs.gov/hipaa/hipaa2 Wed, 30 Mar 2005 00:00:00 PST Facing April 20 HIPAA Security Rules, Many Physicians Lack Data Backup Plans and Access Controls http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=61 DALLAS -- Facing an April 20 deadline on new federal health information security standards, many small physician practices face gaps in three key areas, according to MedSynergies. Wed, 30 Mar 2005 00:00:00 PST HIPAA Compliance Action Urged For Healthcare Small-Medium Sized Businesses http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=59 DALLAS -- Industry surveys indicate that only 30 percent of health plans, or payers, and 18 percent of healthcare providers are currently HIPAA-compliant, and nearly 26 percent of payers and 40 percent of healthcare providers had experienced a security breach in the last six months. "These statistics indicate that healthcare SMBs need to move forward aggressively to ensure compliance,” according toRussell Morgan, president of the Information Technology Solution Providers Alliance (ITSPA). Wed, 30 Mar 2005 00:00:00 PST Kaiser Permanente Selects Compliance Training & HIPAA Training From HCCS http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=60 Health Care Compliance Strategies, Inc. (HCCS), a provider of online multimedia healthcare compliance and competency training courses, said Kaiser Permanente, has selected HCCS compliance and HIPAA training courseware to educate its staff enterprise-wide. Wed, 30 Mar 2005 00:00:00 PST Georgia Hospital Association Get Access To Interior Network Security Assessment http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=57 AUSTIN, Texas -- New benefits for members of the Georgia Hospital Association (GHA) in preparation for the HIPAA enforcement deadline April 21, are being made by Mirage Networks, Inc., a pioneer in security solutions for Interior Network Defense. A key benefit is a complimentary, interior network security assessment with the award-winning CounterPoint appliance, which locates exposures to network threats and abuses that bypass traditional perimeter-based security solutions. Sat, 26 Mar 2005 00:00:00 PST Messaging Security Market Trends, 2005-2008 http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=56 DUBLIN, Ireland -- Messaging Security Market Trends, 2005-2008 is now available from Research and Markets. This is a study that details the current problems with spam, viruses, spyware, inappropriate content, non-secure content, disaster recovery and other email and instant messaging (IM) security issues in the enterprise. Sat, 26 Mar 2005 00:00:00 PST EDS Delivers Comprehensive E-mail Archive Service Featuring EMC Centera http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=54 PLANO, Texas – EDS announced the launch of a comprehensive e-mail archive service that eases enterprises' compliancy woes by more effectively managing corporate e-mail assets. EDS will sell the service to new and existing clients challenged by more than 15,000 global regulations, including SEC 17a-4, HIPAA, Sarbanes-Oxley and Basel II. Wed, 23 Mar 2005 00:00:00 PST HIPAA Regulations Force Medical Practices to Reconsider Email and Web Communications http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=53 Hagerstown, MD -- The latest updates to the Health Insurance Portability and Accountability Act (HIPAA) call for health care providers to adopt secure communication practices to protect Patient Identifiable Data. Until recently, this meant implementing an expensive secure server or Virtual Private Network (VPN) solutions, or avoiding the use of email and online communication altogether. Recent software developments and innovations, however, have put HIPAA-compliant email and web solutions within reach of the small health-care provider and physician practice. Wed, 23 Mar 2005 00:00:00 PST Information Security Compliance Solution for Healthcare Industry Introduced http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=55 CUPERTINO, Calif.-- ArcSight, Inc., announced the introduction of ArcSight ESM Healthcare Edition. ArcSight ESM Healthcare Edition allows healthcare payors, providers and clearinghouses to quickly and clearly streamline security management practices for their unique environment. Wed, 23 Mar 2005 00:00:00 PST User Provisioning Product Addresses Compliance and Complexity Challenges http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=52 ANDOVER, Mass., March 23 -- Sentillion, Inc., a provider of identity and access management solutions for the healthcare industry, announced today the general availability of Vergence® Provisioning Manager(TM) version 1.5. Provisioning Manager is the only user provisioning solution optimized for addressing the unique challenges of automating application account management within a healthcare organization's entire base of clinical and business information systems users. Wed, 23 Mar 2005 00:00:00 PST Simplified Training Solutions and AMA Press Collaborate to Meet HIPAA Security Needs for Small Medical Practices http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=50 RALEIGH, N.C.--Simplified Training Solutions (STS) announced that its multimedia-training and compliance package, HIPAA Security Tool Kit(TM) for small medical practices, is available through a distribution relationship with AMA Press, the book and product publishing division of the American Medical Association. Wed, 23 Mar 2005 00:00:00 PST SOX/HIPAA Compliance Breach is More Costly Than Fines And Penalties http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=51 By Harry Howe, Managing Principal, MindGent LLC Compliance is on the minds of many businesses these days. Public companies have recently had to institute new practices to comply with Sarbanes-Oxley (SOX), and health care organizations and their suppliers are facing an approaching April deadline to comply with the security provisions of HIPAA. Wed, 23 Mar 2005 00:00:00 PST Compliance Is an $80 Billion Issue, Research Predicts http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=48 BOSTON -- AMR Research released a study that predicts the cost of compliance over the next five years will reach the $80 billion mark. Specifically, the firm estimates that organizations will spend close to $15.5 billion on compliance-related activities in 2005. Though an average company will spend approximately $500,000, leading businesses are using these mandates as an opportunity to identify and transform business areas that need improvement. Thu, 17 Mar 2005 00:00:00 PST HIPAA Standard Bearers Offer Tools and Advice on Developing Culture of Privacy and Security http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=49 WASHINGTON -- Health care companies that want to gauge their compliance with the upcoming federal HIPAA security deadline can tap into the expertise of three industry standard bearers March 30. Thu, 17 Mar 2005 00:00:00 PST Protegrity Poll Reveals Vast Majority of Companies Concerned They Would Not Pass Security Compliance Audits Today http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=47 STAMFORD, Conn. -- Findings from a recent poll conducted by Protegrity Corporation, the leading innovator for data security management, show 92% of technical and security professionals are concerned about their companies' current ability to pass compliance audits for data security. The poll found that 75% of the same professionals also lack confidence that their companies will be able to meet future compliance requirements -- which will likely be much more stringent than those currently in effect. Thu, 17 Mar 2005 00:00:00 PST HIPAA does not trump open records law regarding public emergency response information http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=45 ARLINGTON, Va. -- Police and fire departments in Hattiesburg, Miss., will soon resume releasing information about injured victims of crimes, fires and other emergency situations, the city attorney announced in January, almost two months after the state attorney general's office told him that the city is legally obligated to respond to such records requests. City Attorney Charles Lawrence had argued that emergency responders were prohibited from releasing information by the Health Insurance Portability and Accountability Act, a federal law prohibiting health care providers from sharing individuals' health information without their consent. Tue, 15 Mar 2005 00:00:00 PST CIO EXECUTIVE COUNCIL MEMBERS CALL FOR CHANGES IN INFORMATION TECHNOLOGY POLICY, REGULATION http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=43 FRAMINGHAM, MA -- A quarterly news poll from the CIO Executive Council™ (founded by IDG’s CXO Media Inc. and CIO magazine) finds 85% of the nation’s top chief information officers (CIOs) believe the United States government’s creators and writers of information technology-related regulatory measures (i.e., HIPAA, Sarbanes-Oxley, Gramm-Leach-Bliley) do not adequately understand how regulation impacts companies. “CIOs are the first in line to experience federal policies in action. There should be a vehicle in place for them to contribute to federal policy creation and provide frontline feedback on executed policies,” says Mark Hall, CIO of CXO Media and General Manager of the CIO Executive Council. Tue, 15 Mar 2005 00:00:00 PST Health Information Privacy (HIPAA) Notices Have Improved Public's Confidence That Their Medical information Is Being Handled Properly http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=44 ROCHESTER, N.Y. -- The new federal government regulations to protect the privacy of medical records appears to be having a positive effect in reducing abuses of privacy believed to be taking place and increasing public confidence that personal information will be handled properly, an industry survey found. Tue, 15 Mar 2005 00:00:00 PST HIPAA has restricted public access to some records http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=42 By Jim Hannah The Kentucky Enquirer FORT MITCHELL, Ky. - Designed to give people privacy in an electronic age, the Health Insurance Portability and Accountability Act of 1996, known as HIPAA, has lessened the public's access to public records across the nation. Police departments have cited it as a reason to withhold information. Nursing homes have cited it as a reason not to inform residents about registered sex.... Tue, 15 Mar 2005 00:00:00 PST New HIPAA Rules for Group Health Plans and Health Insurers http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=41 By Kevin D. Lyles, Ned Milenkovich The Department of Health and Human Services has issued two sets of final regulations under the Health Insurance Portability and Accountability Act of 1996, as amended ("HIPAA") that will soon become effective and that apply to group health plans and health insurance issuers. The first set of regulations implements previously established health insurance portability rules. The second set of regulations imposes new security standards on group health plans and health insurance that use electronic protected health information. This Jones Day Commentary will describe the compliance obligations for group health plans and health insurance issuers created by these new HIPAA regulations. Tue, 15 Mar 2005 00:00:00 PST New Healthcare Document Exchange Solution http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=40 AUSTIN, Texas, -- SecureCARE Technologies, Inc. a provider of HIPAA-ready Internet- based document exchange and e-signature solutions for the healthcare industry, announced the release of its new application, SecureCARE.net. The solution transforms the costly, labor- and paper-intensive workflows between physicians and home health services providers into a highly efficient and cost effective electronic document exchange process. Mon, 14 Mar 2005 00:00:00 PST Covered Entity May Disclose PHI In Cases Of Litigation, Says HHS http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=39 WASHINGTON, DC -- May a covered entity that is a plaintiff or defendant in a legal proceeding use or disclose protected health information for the litigation? Mon, 14 Mar 2005 00:00:00 PST HIPAA Security Rules Deadline Fast Approaching http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=38 By Jacqueline Myles Crain Compliance deadlines for the Security Rules implemented under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) are fast approaching. In fact, the rules require compliance no later than April 20, 2005, for all covered entities except small health plans. Mon, 14 Mar 2005 00:00:00 PST Physician Practice Management System Delivers HIPAA Security-Readiness http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=37 ATLANTA -- NDCHealth Corporation , a provider of healthcare technology and information solutions, has introduced the latest release of NDCMedisoft(TM), the company's leading physician practice management system designed for small office practices. NDCMedisoft Version 10 is designed with enhanced features to provide HIPAA Security-readiness. Mon, 14 Mar 2005 00:00:00 PST Solution Launched to Meet Health Plan NPI Enumeration Requirements http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=36 PHILADELPHIA -- May 23, 2005 begins the scheduled enumeration period of the National Provider Identifier (NPI) mandated by the Health Insurance Portability and Accountability Act (HIPAA) of 1996. FMG Technologies is helping health plans prepare for NPI with Portico(TM) 5.2, believed to be the only enterprise-wide software platform designed specifically to address data integrity, management and accessibility challenges associated with health plan Provider Network Operations. Mon, 14 Mar 2005 00:00:00 PST Weill Cornell Physicians Begins Pilot Program With RelayHealth Service to Communicate With Patients Online http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=35 NEW YORK -- RelayHealth Corporation, a provider of health plan-reimbursed online doctor-patient communication services, announced an agreement to provide secure online communication services on a pilot basis to some of the Manhattan-based Weill Cornell Physicians Organization and doctors who are part of Weill Cornell Medical College. Sat, 05 Feb 2005 00:00:00 PST SecureCARE Technologies Releases Healthcare Document Exchange Solution http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=34 AUSTIN, Texas, -- SecureCARE Technologies, Inc., has released its new application, SecureCARE.net. The solution transforms the costly, labor- and paper-intensive workflows between physicians and home health services providers into a highly efficient and cost effective electronic document exchange process. Sat, 05 Feb 2005 00:00:00 PST FMG Develops Solution to Meet Health Plan NPI Enumeration Requirements http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=33 PHILADELPHIA,/PRNewswire/ -- May 23, 2005 begins the scheduled enumeration period of the National Provider Identifier (NPI) mandated by the Health Insurance Portability and Accountability Act (HIPAA) of 1996. FMG Technologies is helping health plans prepare for Mon, 24 Jan 2005 00:00:00 PST University of Texas Medical Branch at Galveston Deploys Proofpoint To Secure E-Mail http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=32 CUPERTINO, Calif.,/PRNewswire/ -- The University of Texas Medical Branch (UTMB) at Galveston has deployed the Proofpoint Protection Server®. UTMB deployed Proofpoint's technology to safeguard more than 12,500 end users from unsolicited emails and viruses, while providing flexibility and control over their inboxes. Sat, 22 Jan 2005 00:00:00 PST Nation's Chief Security Officers Call for Help in Tackling Phishing Threat http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=31 FRAMINGHAM, Mass.,/PRNewswire/ -- A quarterly survey of 459 chief security officers (CSOs) and senior security executives conducted by IDG's CSO magazine reveals ninety-six percent (96%) of CSOs expect phishing activity (i.e., scams using email or pop-up messages to deceive the recipient into disclosing sensitive information) to increase in 2005, but the majority (65%) are not confident that businesses and law enforcement are taking action to prevent phishing scams. An overwhelming majority (95%) of CSOs report they take their own preventative measures by deliberately avoiding responding to an email or pop-up due to concerns it might be phishing. Thu, 20 Jan 2005 00:00:00 PST Physmark Introduces Healthcare Suite 'On Demand' Software For MCOs http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=29 DALLAS, /PRNewswire/ -- Physmark has introduced Healthcare Suite, an integrated software system that lets HMOs, TPAs, healthplans and self-insured employer organizations add essential ASO (Administrative Services Only) capabilities -- such as web enrollment and inquiries, HIPAA EDI compliance, repricing and data mining -- without altering the systems they already have in place. Tue, 18 Jan 2005 00:00:00 PST HIPAA Transactions: What's Next? http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=30 WASHINGTON, DC -- Washington Publishing Company (WPC) has released Open Source schemas for these mandated transactions: health care claims, claim payment, remittance advice, coordination of benefits, claim status, enrollment, eligibility, premium payments, referral certification and authorization. Now the WPC Open Source schema for the 275: Additional Information to Support a Health Care Tue, 18 Jan 2005 00:00:00 PST U.S. Spending on Medical Transcription Outsourcing Services Will Reach $4.2 Billion in 2008, New Study Reveals http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=28 FRAMINGHAM, Mass., – The medical transcription outsourcing market has had to weather financial scandals, medical privacy threats, and offshoring trends that have threatened to decimate the U.S. market. Oddly, none of these factors has been sufficiently lethal to wreck or even weaken the Tue, 18 Jan 2005 00:00:00 PST HIPAA Security Protecting Electronic Health Information http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=27 The University of Pennsylvania has undertaken an initiative to ensure that all Schools and Centers that handle health information will be in compliance with the Security Rule of the United States’ Health Insurance Portability and Accountability Act of 1996 (HIPAA) by April 21, 2005. Closely related to the HIPAA Privacy Rule (2003) governing the use and disclosure of individually identifiable health information, the Wed, 12 Jan 2005 00:00:00 PST "Drop & Deploy" IT Control Solution to Address HIPAA Delivered by Configuresoft http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=26 COLORADO SPRINGS, CO -- (MARKET WIRE) -- 01/11/2005 -- Configuresoft, announced the Enterprise Configuration Manager/HIPAA (ECM/HIPAA) IT control solution. This solution helps health care organizations map to the 42 HIPAA Security Rules (including all of the Administrative and Technical Safeguards), by continually auditing network activity for policy compliance. The solution addresses patch management, event log collection/archiving and includes compliance templates for managed machines Wed, 12 Jan 2005 00:00:00 PST XML HIPAA Schemas: Open Source Schemas Representing HIPAA Transactions Available From WPC http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=24 Washington, DC, -- Representing HIPAA EDI data in XML just became easy. Up until now, doing so had been a complicated and expensive task. Many companies and vendors created their own interpretations of HIPAA transaction standards in XML. WPC, publisher of Electronic Data Interchange (EDI) transaction implementation guides Tue, 11 Jan 2005 00:00:00 PST Holy Cross Hospital Adopts Strategic Blended-Learning Training Initiative http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=23 NEW LONDON, Conn., Jan. 10 /PRNewswire/ -- Responding in part to the Joint Commissions on Accreditation of Healthcare Organizations' (JCOAH) requirement for immediate compliance of all regulatory training of medical staff, Holy Cross Hospital today announced that it has prescribed ePath Learning's ASAP+ to meet their compliance and patient training initiatives. Leveraging ePath Learning's Web-based Integrated Learning Management Service (iLMS) and the hospital's existing wireless Mon, 10 Jan 2005 00:00:00 PST HIPAA Keep It Simple To Be Understood http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=22 Golden Valley, MN -- How about HIPAA stuff in simple English. Some Plain Language Criteria:words per sentence: 26 and 24, suggests a readability consultant. Sun, 09 Jan 2005 00:00:00 PST Routine Activities Can Compromise Patient Information http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=21 MORGANTOWN,WVa -- When hospital employees casually talk about patient cases in public areas, they breach patient privacy, two university researchers found, as they studied how conversations in hospital hallways and waiting rooms pose a threat to the confidentiality of patients’ medical information. Sun, 09 Jan 2005 00:00:00 PST HIMSS/URAC Collaborate to Co-Market HIPAA Privacy, Security and Health Web Site Accreditation http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=20 CHICAGO, /PRNewswire/ -- The Healthcare Information and Management Systems Society (HIMSS) and URAC have entered into a joint marketing agreement to promote the URAC Health Information Technology Accreditation Programs. Through the agreement Sat, 08 Jan 2005 00:00:00 PST Challenges of HIPAA Security Standards http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=19 Wall Township, N.J., - With the April 2005 security compliance deadline looming, healthcare entities have one eye on the clock and the other on their auditing programs. Covered entities have just four months to establish the security and privacy standards mandated by the Health Insurance Portability and Accountability Act (HIPAA). Thu, 06 Jan 2005 00:00:00 PST Companies Perceive Internal Security Threats as Having Greatest Potential Economic Impact http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=18 STAMFORD, Conn.,/PRNewswire/ -- Companies perceive internal security threats -- those inside the firewall such as employees,partners, and suppliers -- as having greater potential economic impact than external threats, according to new findings from a poll conducted by Protegrity Corporation. Thu, 06 Jan 2005 00:00:00 PST URAC ELECTS HEALTH IT EXPERT TO BOARD http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=17 Washington, D.C. -- Kathryn Creech, president and CEO of Miavita, a provider of online programs that help individuals achieve better health, has been elected a member-at-large of the URAC Board of Directors. Wed, 05 Jan 2005 00:00:00 PST Caritas Christi Health Care's Network Receives Clean Bill of Health - Safeguards Online Patient Data http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=16 Boston -- Caritas Christi Health Care, the second largest health care system in New England, has deployed a network security platform from Fortinet to secure computer network traffic for its corporate data center, hospitals and extended association of doctor's offices. Caritas Christi chose Fortinet's FortiGate systems to comply with the Health Insurance Portability and Accountability Act (HIPAA). Wed, 05 Jan 2005 00:00:00 PST HHS Issues Final Regulation on Access to Group Health Coverage http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=15 WASHINGTON, PRNewswire -- The Department of Health and Human Services (HHS) announced a final regulation under the provisions of the 1996 law on health insurance portability that give workers greater access to group health plan coverage. The final regulation, which went on display December 29, at the Office of the Federal Register, implements provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) that provide greater portability and availability of group health coverage when workers and family members change or lose a job. Wed, 05 Jan 2005 00:00:00 PST HIPAA Alters Pharma Rep Strategy http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=14 RESEARCH TRIANGLE PARK, N.C., Dec. 21 /PRNewswire/ -- As the number of pharma reps grows -- more than 85,000 pharma sales reps in the United States alone -- the fierce competition for physician face-time escalates. According to research from Cutting Edge Information, the sales reps who proactively address HIPAA guidelines with their target physicians will have greater access to discuss their own products. Industry experts predict that HIPAA guidelines could reduce physician access by as much as Tue, 04 Jan 2005 00:00:00 PST Gartner Predicts Three of Top 10 PC Vendors Will Exit the Market by 2007 http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=13 STAMFORD, Conn., — With slower growth rates and reduced profit margins, the PC industry will face vendor consolidation, with three of the top 10 PC manufacturers exiting the market by 2007, according to Gartner, Inc. While the market has registered double-digit shipment growth the past few years, tougher times lie ahead. PC unit growth is forecast to average 5.7 percent annually from 2006 Tue, 04 Jan 2005 00:00:00 PST WEDI Elects New Officers for 2005 http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=10 RESTON, VA-November 29, 2004 - Mark McLaughlin, Regulatory Policy Analyst for McKesson, will begin serving a two-year term as WEDI Chair on January 1, 2005. Jim Whicker, Corporate Director of Electronic Commerce/EDI for the Accounts Receivable Division of Intermountain Health Care, has been elected Chair-Elect. Tue, 04 Jan 2005 00:00:00 PST South Nassau Communities Hospital Selects Voltage Security to Provide Secure Messaging Between Physicians and Patients http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=4 PALO ALTO, CA -- (MARKET WIRE) -- 12/06/2004 -- Voltage Security, Inc. (www.voltage.com), a global leader in enterprise privacy, today announced that South Nassau Communities Hospital (SNCH), a 435-bed acute care hospital serving the communities of the South Shore of Long Island, NY, has selected Voltage SecureMail™ to protect confidential patient information sent between patients and physicians. Voltage SecureMail enables SNCH to comply with federal HIPAA regulations that require protection of patient information. The SNCH deployment of Voltage SecureMail revolves around the use of the innovative Voltage Zero Download Messenger™ software which enables hospita Tue, 04 Jan 2005 00:00:00 PST HIMSS Integration & Interoperability Steering Committee Sets Goals http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=11 Chicago, IL -- The HIMSS (Healthcare Information and Management Systems Society) Integration and Interoperability Steering Committee has developed its mission statement, goals, and key tactics establishing the committee’s overall action plan for the coming year. The steering committee's plans support interoperability and the implementation of a national health information network recognized as key components of the Tue, 04 Jan 2005 00:00:00 PST Forrester Research Identifies Major Technology Trends For 2005 http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=12 Cambridge, Mass., -- Forrester Research, Inc.'s annual collection of trend reports highlights growth opportunities and hurdles in a number of industries and technology disciplines, including: application development, automotive, consumer devices, content management, customer experience, enterprise applications, financial services, healthcare, IT infrastructure, IT outsourcing, IT spending, online retail, security, telecom, and travel. Tue, 04 Jan 2005 00:00:00 PST New FTC Rule to Guard against Identity Theft Comes as Companies Get Set to Dump Millions of Computers http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=9 HIGHTSTOWN, N.J.--(BUSINESS WIRE)--Dec. 13, 2004--A recent final Federal Rule to guard against identity theft comes at a time when companies are particularly vulnerable to the crime because they are getting ready to junk or remarket hundreds of millions of computers, with many packed full of sensitive information, according to Marc Sherman, CEO of WindsorTech, Inc. The Rule, which is part of the Fair and Accurate Credit Transactions Act (FACT) of 2003, requires companies to protect Tue, 04 Jan 2005 00:00:00 PST Unisys IT Security Experts Predict 2005 Will Bring Greater Liability, Growing Mobile and Cyber Threats and Increased Identity Management http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=8 (PRLEAP.COM) Singapore, December 08, 2004 – Unisys (NYSE: UIS) IT security consultants today revealed what they predict to be the major IT security issues and developments facing enterprises in 2005. They stressed that enterprises worldwide will meet seismic challenges in the coming year as they rely more and Tue, 04 Jan 2005 00:00:00 PST Office Security 'Important Issue' Among Smaller Businesses, ITSPA Survey Reveals; H-P, Intel and Microsoft Security Products Ranked Best by Nation's IT Solution Providers http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=7 DALLAS--(BUSINESS WIRE)--Dec. 7, 2004--The nation's small to medium-sized businesses (SMBs) rank office computer security among the most important issues they face, according to a member survey conducted by the Information Technology Solution Providers Alliance (ITSPA), a national, non-profit alliance that helps SMBs understand how technology and local technology providers can help them succeed. The ITSPA survey, which polled IT solution providers across the nation, indicated members spent nearly 25 percent of their Tue, 04 Jan 2005 00:00:00 PST XML HIPAA Schemas: Open Source Schemas Representing HIPAA Transactions Available From WPC http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=6 NORTH BEND, Wash., Dec. 6 /PRNewswire-FirstCall/ -- Representing HIPAA EDI data in XML just became easy. Up until now, doing so had been a complicated and expensive task. Many companies and vendors created their own interpretations of HIPAA transaction standards in XML. WPC, publisher of Electronic Data Interchange (EDI) transaction implementation guides adopted under HIPAA, announced the release of W3C complaint XSD, Open Source Schemas, under the GNU license. Created directly from the same database as the federally mandated Tue, 04 Jan 2005 00:00:00 PST Data Storage Management Solutions Essential to Meet HIPAA Recommendations http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=5 PALO ALTO, Calif.--(BUSINESS WIRE)--Dec. 6, 2004--Healthcare facilities in the United States are currently in a rush to meet the Health Insurance Portability and Accountability Act (HIPAA) deadline for security compliance. Data storage management solutions are likely to play a key role in preparing these facilities to meet the HIPAA recommendations regarding keeping patient record in a timely, secure, and organized manner. Tue, 04 Jan 2005 00:00:00 PST MEDICARE TAKES FURTHER STEPS TO PROMOTE THE USE OF HIPAA STANDARDS FOR ELECTRONIC CLAIMS http://webserver.healthrespubs.com/cgi-bin/WebObjects/hipaaBulletinNews.woa/wa/getArticle?id=2 Electronic Medicare claims that do not meet Health Insurance Portability and Accountability Act (HIPAA) standards will be treated as paper claims and paid more slowly than HIPAA-compliant electronic claims beginning July 1next week, Mark B. McClellan, M.D., Ph.D., administrator of the Centers for Medicare & Medicaid Services (CMS, said. The great majority of electronic claims we are receiving meet the required HIPAA standards," McClellan said, "but for the those still not in compliance there is going to be a delay in getting Tue, 04 Jan 2005 00:00:00 PST