Help Me With HIPAA

Today's podcast is a little different from our normal ones. We are covering a wide variety of subjects involving HIPAA, OCR, HHS, and PHI rather than one specific topic.

For more go to HelpMeWithHIPAA.com/59

Preventing ransomware is a major concern for every business today. If not, it should be. This episode covers understanding ransomware and methods for preventing it.

• Is ransomware a phi breach?
• April record number of cases and not slowing down
• 8 hospitals (more by the time we record) already hit.
• Training and vigilance is best defense
• Ransomware attacks continue to evolve to be "smarter"

For more see HelpMeWithHIPAA.com/58

HIPAA policy and procedure templates seem to be a panacea to many people who are just trying to meet the standards and move on. However, these are not the droids you seek! Templates can be the basis for what you need to do but they shouldn't be the solution to the written policy and procedure requirements under HIPAA.

See HelpMeWithHIPAA.com/57

Two reasons for today's topic: A question we received from a listener about understanding antivirus software and a news report about a malware scan that interrupted a medical procedure. Between those two cases it felt like it was time to discuss malware protection under HIPAA.

1. Suzie from Savannah: I would like to have a podcast or a quick answer to the different between anti-virus software releases and anti-virus definitions being up-to-date. I understand the AV definitions up to date but a little fuzzy on AV software releases and examples please....
2. Report came out about malware scan stopping a medical procedure

We always look at the security rule aspects of HIPAA because they deal with the easier parts for people to deal with when it comes to lowering their risk, but today we are diving into some privacy rule guidelines, because there is new HIPAA privacy guidance that has just been published.

Get more info at HelpMeWithHIPAA.com/55

Recently, we ended up in several discussions about HIPAA access logs and what they really require with our clients. As per usual, any topic that comes up multiple times in my "real job" becomes a discussion for HMWH. So, today we are talking about HIPAA access logs to attempt to clear up some confusion we have encountered. There are multiple types of HIPAA access logs being created in most environments and you should be dealing with pretty much all of them in some manner.

Get more at HelpMeWithHIPAA.com/54

We talked about OCR audits recently because they are in the news. The audit protocol is a perfect guide for developing and maintaining your HIPAA compliance programs. In fact, the audits have been a hot topic in the industry this month.

However, the fact that only 200 audits will take place really means the audit protocol is more important as a guide for what your program should look like in the event you have a breach or complaint investigation. Statistically, you are much more likely to need it for that reason.

Read more at HelpMeWithHIPAA.com/53

We really appreciate the support and feedback we have received for our little HIPAA podcast project known as Help Me With HIPAA. This episode marks one complete year of weekly HIPAA podcasts (counting the special bloopers holiday episode). We certainly learned a great deal since we started this little DIY project last year. Granted, David was a convert to the idea much quicker than Donna.

Here we are one year later and our little HIPAA podcast is starting to gain some real momentum. That is all thanks to you, our listeners, for sticking with us through our growing pains as we fumbled through figuring it all out. Keep on sending in your questions and suggestions, we appreciate your help and support!

Also, a special shout out to the silent member of our team Bojan Sabioncello for making us sound so much better once he came on board!

After saying all of that, what are we doing for this special episode? We are interviewing each other to discuss how we ended up together and what we do in our "real jobs". this HIPAA podcast is a huge part of what we do but it isn't the only thing you get from us.

For more information go to HelpMeWithHIPAA.com/52

We often talk about doing the "work" of compliance. Some people seem to have the attitude that all I need to do some is annual staff training and hand out a Notice of Privacy Practices to do small office HIPAA compliance. When we try to explain there is more to it than that we often get pushback about the requirements.

We always hear comments like:

• we don't have time,
• we don't have resources,
• we can't be expected to do this.

So, how DO you do small office HIPAA compliance? Today we are going to talk to someone who is definitely doing the work of HIPAA compliance in a small office. We are doing an interview with Erien Fryer of Medical Direct Care in Clarksville, TN to discuss small office HIPAA compliance issues, obstacles, and how to just get it done.

For more details go to HelpMeWithHIPAA.com/51

Every website needs security. What questions should you be asking about your business websites and who should you be asking? Website security can be an open hole in your security plans. It can also be the source of lots of problems for your business if you don't pay attention to the site content or securing your message.

More info on the website at helpmewithhipaa.com/50