In a recently settled HIPAA case, the Department of Health and Human Services (HHS) set a new precedent for guarding electronic protected health information (ePHI).
In an extensive investigation, HHS determined that a small surgery practice in Arizona had violated HIPAA privacy rules and had instated few safeguards to protect patients’ ePHI. The practice reportedly posted PHI on an Internet-based, publicly-accessible calendar and sent emails containing PHI to workers’ personal email accounts. Read More, download Newsletter
