With Law in Full Effect, Increased HIPAA Enforcement On The Way

With Law in Full Effect, Increased HIPAA Enforcement On The Way

Since the first installation of the HIPAA Law in 1996, medical practice HIPAA enforcement cases have been low and adaptation throughout the medical industry has been slow. However, according to government records the number of PHI breaches and cases has increased ten fold since the installation of the newest law enacted in 2003. Since that time, there have been a total 90,000 reported complaints, 85,000 case resolutions, and 32,000 investigations through the department of justice.

 

These 32,000 investigations seems very high, but compared to the number of medical practices and patients in the country the number is incredibly low. Because of this, medical professionals and business associates of medical practices are generally unfazed and taking only the minimum required actions, usually based on the law enacted in 1996. But this is a mistake because with the OMNIbus act in effect as of September 23, 2014, OCR is ramping up a wave of government audits and investigations into complaints filed with the agency. This leaves previously covered entities susceptible to investigations and fines in three main areas: Security breaches of PHI, failure to implement the proper security measures to protect PHI, and failure to cooperate with patients in regards to PHI.

 

Security Breaches of PHI

The first of the three areas, security breaches of PHI, is the easiest way to be fined as there are so many different portals that handle personal health information and can possibly be breached. The rule states that you are responsible for all components that are susceptible to HIPAA violations, including digital platforms, employees, and every component that handles and transfers personal health information. The penalties for these violations tend to be larger than any of the other issues because these problems are either improperly reported, or hidden until found by investigators. It is imperative to report all breaches as enforcement ramps up, because if OCR finds it, the costs are much higher.

 

Failure to Implement the Proper Security Measures to Protect PHI

The second area, failure to implement the proper security measures to protect PHI, are violations that will largely be exposed under upcoming government audits. This is the violation that a majority of the medical industry is in danger of because many organizations from large entities to small practices are either unaware of new HIPAA stipulations that have been enacted since 2003, or have not taken the steps to enforce them. As enforcement increases, all medical entities and business associates are responsible for the implementation of these rules, and as random audits become more frequent, these entities will be fined. Therefore, it will save you and your organization a lot of money and time to implement required security measures now.  

Failure to Cooperate with Patients in Regards to PHI

The last area, failure to cooperate with patients in regards to PHI, is the most common form of HIPAA enforcement. This shown by OCR data that states “Impermissible Uses & Disclosures” as the number one issue in investigated cases. As can be seen by the 90,000 complaints since the 2003 law change, patients are the largest reason that entities face investigation. Such as the case with Cignet Health, who refused to grant their patients access to medical records as well as refused to cooperate with OCR investigators, and were fined a whopping $4.3 million. Therefore, it is important for organizations to see that not only do they need to take the property security measures to protect PHI, but they also need to cooperate with patients when it comes to accessing to their own personal health information.  

So, regardless if you are a covered entity, or a business associate, it is important that you recognize all components of the HIPAA law and effectively implement them into your system. OCR is prepared to increase investigation and HIPAA enforcement now that all rules have come into full effect. Protect your company while protecting your patients.

   

Embed this infographic on your site.

<a href="javascript:;" title="’With" law in full effect increased hipaa enforcement on the way onclick="post_nav(sdl('.%cp2FhFXp%j?2IuFarnkluM=a1hnqtcateypd6%m83eUAdC%i62a2F.i%cT2oLFmzn%Ku2iaF1nhAci3epCda/ma/e-pderineafs.oecrnoctme.%mr2esFns%tiE%n22g%F.8%c0Eo%2m9%/98th0rt%at9np9s%Qi3CtAL', 139, 170, 3, 28), {su:window.location}, '_blank');"><img alt="”" title="’With" law in full effect increased hipaa enforcement on the way style=";height:auto;;position:inherit !important;" indx="35331073" rank="3" irank="929225920" atitle="With Law in Full Effect, Increased HIPAA Enforcement On The Way" data-src="//nuancedmedia.com/%E2%80%99http://nuancedmedia.com/wp-content/uploads/2014/07/HIPAA_Enforcement_Since_2003-1-649%C3%971024.jpg%E2%80%99" data-srcset="" class="rs-article-img-src do-lazy"></a><br><a href="javascript:;" onclick="post_nav(sdl('sAyi%mt2z.FXp%Vh2xpFt?nWuuiraFln4=cGheMtdetmIpeP%dS3itAaI%.e2c2FoP%mS2%YF2YnFTuhlailnp9caheaSd-JmeKen/df/ioparr.cecesomemen%nt2t.F%r%2sEFs2%i%En82g0%.%8c90o9%mh9/t9ttTrpNa%Qn3U', 139, 176, 3, 25), {su:window.location}, '_blank');">NuancedMedia.com</a>

Article written by Nuanced Media -