The Road to Compliance

The road to compliance is long and bumpy, but a trip we must all take in 2018. In January 2017, compliance professionals from the Department of Health and Human Services (HHS), Office of Inspector General (OIG) held an assembly in which they discussed how to measure...

Compliance Corner – October

If a patient is deceased, may a covered entity disclose to a family member who was involved in the patient’s care or payment for healthcare prior to the death, PHI of the deceased? Answer: Yes, unless there is an expressed statement to the contrary. (45CR...

Compliance Corner: September

What are the 3 core health activities where a covered entity could disclose a patient’s PHI? Answer: The core health care activities of “Treatment,” “Payment,” and “Health Care Operations” are defined in the Privacy Rule at 45 CFR...

Compliance Corner: August

Define the principle of “minimum necessary”? Answer: a covered entity must make reasonable efforts to use, disclose and request only the minimum amount of PHI needed to accomplish the intended purpose of it’s...