Monthly Archives: July 2011

HIPAA – National 5010 Testing Days are Underway

As part of the upcoming transition to the 5010 transaction standards (which will replace the existing version of the X-12 standards for all HIPAA covered entities) CMS has organized “National 5010 Testing Days.” CMS has explained that the testing days will encourage collaboration between providers and the Medicare Administrative Contractors (MACs) by allowing providers to (...) [Read More]

HIPAA Audits Are Coming: KPMG Contracted To Perform 150 Audits Through 2012

You can’t run and you can’t hide — HIPAA audits are coming. HHS, through the Office of Civil Rights (OCR) recently named KPMG as the recipient of a $9.2 million contract to develop a HIPAA auditing protocol and conduct audits on 150 covered entities and business associates before December 31, 2012. An additional $180,000 contract (...) [Read More]

Breach Reporting Plans: Practical Preparation for the (Almost) Inevitable Breach

If there is one aspect of the HITECH Act amendments to the HIPAA privacy rule that has had a major impact on the health care provider community and its business associates, it is the so called “Breach Notification Rule.” The rule requires that covered entities (and their business associates) report breaches of unsecured protected health (...) [Read More]

Why You Need to Worry AGAIN about HIPAA: Seven Practical Tips

In this age of information overload, it is no wonder that privacy incidents are on the minds of regulators, the media and patients. Electronic information in all forms comes at us faster and faster, leaving the recipient without much time to discern among appropriate privacy levels. The increased use of social media and the reality (...) [Read More]

Proposed Changes to the eRx Incentive Program

Providers frustrated with the apparent disconnects between the Electronic Prescribing (eRx) and Electronic Health Record (EHR) programs may receive relief under a new proposed eRx incentive program rule [PDF] (the NPRM). The NPRM promises to: (1) modify the eRx program’s functional definition of a “qualified” eRx system to permit the use of “certified” EHR technology (...) [Read More]