After announcing that its HIPAA enforcement collections had reached a new high-water mark of $28.7 million in 2018, the Office of Civil Rights (OCR) of the U.S. Department of Health and Human Services has started this year quietly. Through the first few months of 2019, the OCR has published no resolution agreements and it is [&hellip… Continue Reading »
A relatively quiet year for HIPAA enforcement is ending with a small flourish. The Office of Civil Rights of the Department of Health and Human Services (HHS) has announced two settlements with covered entities within the span of eight days. The first settlement involved Advanced Care Hospitalists (ACH), a company that provides internal medicine physicians to [&hellip… Continue Reading »
(The following is excerpted from Ballard Spahr’s CyberAdviser blog.) The Departmental Appeals Board of the U.S. Department of Health and Human Services has granted summary judgment against the University of Texas MD Anderson Cancer Center upholding $4.3 million in penalties against the Center for violations of HIPAA’s privacy and security rules. In this case, the [&hellip… Continue Reading »
Cloud service providers that process electronic protected health information (ePHI) are business associates under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), even if the PHI is encrypted and the cloud service provider is not able to view it. This unequivocal determination, made in recent guidance by the U.S. Department of Health and [&hellip… Continue Reading »
The U.S. Department of Health and Human Services Office for Civil Rights (OCR) announced an agreement with Catholic Health Services of the Archdiocese of Philadelphia (CHCS), settling allegations that CHCS violated the Health Insurance Portability and Accountability Act (HIPAA) Security Rule by failing to protect electronic protected health information (ePHI). This is the first enforcement [&hellip… Continue Reading »
The Office of Civil Rights (OCR) of the Department of Health and Human Services has moved forward with Phase 2 of its Health Insurance Portability and Accountability Act of 1996 (HIPAA) audit program. On Monday, July 11, 2016, OCR sent emails to 167 covered entities (including health plans, health care, and health care clearinghouses) notifying them [&hellip… Continue Reading »
The Federal Trade Commission (FTC), in partnership with other federal agencies, has released an online tool that provides developers legal guidance for the creation of mobile health applications (apps). Companies that are developing mobile health applications should refer to the guide as a starting point for determining the type of security features they want and/or [&hellip… Continue Reading »
The Office of Civil Rights (OCR) of the Department of Health and Human Services has begun Phase 2 of its audit program under the Health Insurance Portability and Accountability Act (HIPAA). In this phase, OCR will: · Collect contact information from covered entities and their business associates; · Audit selected covered entities and, later, business [&hellip… Continue Reading »
After much silence, some litigation, and recent congressional hearings, the Equal Employment Opportunity Commission (EEOC) has at long last proposed regulations (together with a fact sheet and set of frequently asked questions and answers) that interpret how the Americans with Disabilities Act (ADA) applies to wellness program incentives. Employers that sponsor wellness programs are likely [&hellip… Continue Reading »
If you sponsor or administer a group health plan, you are almost certainly taking steps to prepare for legal requirements that will become effective on or before January 1, 2015. New rules under HIPAA, the Affordable Care Act (ACA), and other laws will affect your plans. As we pass the midpoint of 2014, it is [&hellip… Continue Reading »
It has taken the federal government a long time to implement the requirement that health plans obtain a unique identification number under HIPAA, but a deadline has been set. Larger plans (with receipts of at least $5 million) must obtain this ID number by November 5, 2014. Smaller plans have an additional year to obtain [&hellip… Continue Reading »
The Departments of Treasury, Labor, and Health and Human Services have issued a revised set of proposed regulations for nondiscrimination in wellness programs. The regulations prohibit a wellness program offered as part of a health plan from discriminating against individuals on account of an adverse health factor. The revised rules are scheduled to apply in [&hellip… Continue Reading »
Although the pace of new legislation affecting health and other welfare benefits has slowed after the first two years of the Obama Administration, plan sponsors will find no shortage of developments to monitor and implement in 2012. This alert provides a very brief review of recent developments and matters to watch in the new calendar [&hellip… Continue Reading »
