HIPAA Health Information Privacy, Security and Breach Notification Rules
Popular Questions
Text messaging an...
There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...
23 votes 17 commentsPHI request throu...
I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...
9 votes 4 commentsIs a BAA required...
If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to sig...
7 votes 1 commentsCan HIPAA address...
Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...
6 votes 10 commentsNew Questions
Homegrown database
Looking to create a database for managing patient information - not accessible to patients or non-clinical staff. The data will be MD5 encrypted e...
1 votes 0 commentsCould a covered e...
If a health care provider who is a covered entity were to create a general fitness/wellness app and silo off any collected data from their covered ...
1 votes 0 commentsvirtual job board...
Healthcare providers place requests for interpreter services on a web portal that the state agency leases from a private vendor. Interpreters then ...
1 votes 0 commentsAuthorization to ...
If a client or parents of the client (Under 18) are out of the country can an email give permission to the clinician to speak with another third-...
1 votes 0 commentsRandom Questions
Are we a covered ...
How can we determine if we’re a covered entity? The resources to make that determination are expensive – i.e. law firms
5 votes 5 commentsDeveloper and HIPAA
Assume you have a software company that will be using a smartphone application and related device to record and store arguably protected health inf...
2 votes 5 commentsCloud Security
What are the suggested encryption protocols that one should implement in order to fulfill the 164.312(a)(2)(iv) Have you implemented a mechanism t...
5 votes 2 commentsHow should develo...
Right now, developers expend a lot of time and resources (including the cost of data storage) on audit logging but don’t have assurance that they a...
4 votes 2 comments