{"id":608,"date":"2018-04-09T09:39:39","date_gmt":"2018-04-09T13:39:39","guid":{"rendered":"http:\/\/192.168.157.126\/?page_id=608"},"modified":"2019-04-09T07:43:34","modified_gmt":"2019-04-09T11:43:34","slug":"hipaa-compliance","status":"publish","type":"page","link":"http:\/\/192.168.157.126\/index.php\/landing-pages\/hipaa-compliance\/","title":{"rendered":"HIPAA Compliance"},"content":{"rendered":"<h5 style=\"text-align: center;\"><img loading=\"lazy\" class=\"size-medium wp-image-685 alignleft\" src=\"http:\/\/192.168.157.126\/wp-content\/uploads\/hipaa-compliant-300x147.png\" alt=\"\" width=\"300\" height=\"147\" srcset=\"http:\/\/192.168.157.126\/wp-content\/uploads\/hipaa-compliant-300x147.png 300w, http:\/\/192.168.157.126\/wp-content\/uploads\/hipaa-compliant.png 614w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>Are YOU HIPAA Compliant???<\/h5>\n<p>Tech Tonics can evaluate your entire system to see whether or not you are in compliance.\u00a0 In addition to hardware and software requirements there are also day-to-day human activities that need to be assessed in order to determine if you are in compliance.\u00a0 We have the knowledge to not only make sure your components are in order but the know-how to educate you and your staff on best practices around the office.<\/p>\n<p>Did you know HIPAA <strong>violations<\/strong> can be really <strong>expensive<\/strong>?\u00a0 The violation cost can range anywhere from $100 to $50,000 per violation and could cost a business up to <strong>$1.5 million in a year!<\/strong>\u00a0 There can also be criminal charges resulting in jail time.<\/p>\n<p><strong>Is it worth it?\u00a0 Don&#8217;t take any more chances &#8211; Call us at 215-645-2488 to setup a free evaluation of your current IT systems and to see whether or not we would be a good fit for your practice.<\/strong><\/p>\n<h5>Click <a href=\"http:\/\/192.168.157.126\/index.php\/2018\/04\/27\/physicians-is-your-practices-office-network-hipaa-compliant\/\">HERE<\/a> to see a recent blog post about an office in dire need of help getting their office on track to being HIPAA compliant.<\/h5>\n<h5><\/h5>\n<h5><\/h5>\n<h5 style=\"text-align: center;\">What is HIPAA Compliance?<\/h5>\n<p><strong>HIPAA, the Health Insurance Portability and Accountability Act<\/strong>, sets the standard for protecting sensitive patient data. Any company that deals with protected health information (PHI) must ensure that all the required physical, network, and process security measures are in place and followed.<\/p>\n<p>This includes <strong>covered entities (CE)<\/strong>, anyone who provides treatment, payment and operations in healthcare, and <strong>business associates (BA)<\/strong>, anyone with access to patient information and provides support in treatment, payment or operations. Subcontractors, or business associates of business associates, must also be in compliance.<\/p>\n<p>The <strong>HIPAA Privacy Rule<\/strong> addresses the saving, accessing and sharing of medical and personal information of any individual, while the <strong>HIPAA Security Rule<\/strong> more specifically outlines national security standards to protect health data created, received, maintained or transmitted electronically, also known as electronic protected health information (ePHI).<\/p>\n<p>If you are hosting your data with a HIPAA compliant hosting provider, they must have certain administrative, physical and technical safeguards in place, according to the U.S. Department of Health and Human Services. The physical and technical safeguards are most relevant to services provided by your HIPAA compliant host as listed below, with detail on what constitutes a HIPAA compliant data center.<\/p>\n<ul>\n<li><strong>Physical safeguards<\/strong> include limited facility access and control, with authorized access in place. All covered entities, or companies that must be HIPAA compliant, must have policies about use and access to workstations and electronic media. This includes transferring, removing, disposing and re-using electronic media and <strong>electronic protected health information (ePHI)<\/strong>.<\/li>\n<li><strong>Technical safeguards<\/strong> require access control to allow only the authorized to access electronic protected health data. Access control includes using unique user IDs, an emergency access procedure, automatic log off and encryption and decryption.<\/li>\n<li><strong>Audit reports, or tracking logs<\/strong>, must be implemented to keep records of activity on hardware and software. This is especially useful to pinpoint the source or cause of any security violations.<\/li>\n<li><strong>Technical policies<\/strong> should also cover integrity controls, or measures put in place to confirm that ePHI hasn\u2019t been altered or destroyed. IT disaster recovery and offsite backup are key to ensure that any electronic media errors or failures can be quickly remedied and patient health information can be recovered accurately and intact.<\/li>\n<li><strong>Network, or transmission, security<\/strong> is the last technical safeguard required of HIPAA compliant hosts to protect against unauthorized public access of ePHI. This concerns all methods of transmitting data, whether it be email, Internet, or even over a private network, such as a private cloud.<\/li>\n<\/ul>\n<p>A supplemental act was passed in 2009 called The Health Information Technology for Economic and Clinical Health (HITECH) Act which supports the enforcement of HIPAA requirements by raising the penalties of health organizations that violate HIPAA Privacy and Security Rules. The HITECH Act was formed in response to health technology development and increased use, storage and transmittal of electronic health information.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Are YOU HIPAA Compliant??? Tech Tonics can evaluate your entire system to see whether or not you are in compliance.\u00a0 In addition to hardware and software requirements there are also day-to-day human activities that need to be assessed in order&#8230; <a href=\"http:\/\/192.168.157.126\/index.php\/landing-pages\/hipaa-compliance\/\" class=\"read-more\">Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"parent":1161,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"http:\/\/192.168.157.126\/index.php\/wp-json\/wp\/v2\/pages\/608"}],"collection":[{"href":"http:\/\/192.168.157.126\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"http:\/\/192.168.157.126\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"http:\/\/192.168.157.126\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/192.168.157.126\/index.php\/wp-json\/wp\/v2\/comments?post=608"}],"version-history":[{"count":26,"href":"http:\/\/192.168.157.126\/index.php\/wp-json\/wp\/v2\/pages\/608\/revisions"}],"predecessor-version":[{"id":1054,"href":"http:\/\/192.168.157.126\/index.php\/wp-json\/wp\/v2\/pages\/608\/revisions\/1054"}],"up":[{"embeddable":true,"href":"http:\/\/192.168.157.126\/index.php\/wp-json\/wp\/v2\/pages\/1161"}],"wp:attachment":[{"href":"http:\/\/192.168.157.126\/index.php\/wp-json\/wp\/v2\/media?parent=608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}