Compliance & Legal

A black gavel lays on a desk
By Andrea Fox 09:30 am August 17, 2023
When Vanderbilt University Medical Center turned over non-anonymized medical records to the state without patient consent, it pitted Tennessee state law against HIPAA and unleashed a federal investigation as well as a class action patient lawsuit. 
Cardiac monitors in a hospital setting
By Andrea Fox 10:29 am August 15, 2023
A new study looked at how AI and NLP could be used in a post-acute discharge patient engagement program to address factors beyond social determinants of health and address emotional, behavioral and other barriers to recovery.
By Andrea Fox 10:55 am August 11, 2023
New research by the Ponemon Institute and IBM Security revealed that the global average cost of a data breach reached $4.45 million and the costs of avoiding law enforcement after a ransomware attack have increased by $470,000.
A female with a doctor's coat and glasses conducts a telehealth video call. There is a shoulder of a patient in the foreground.
By Andrea Fox 10:46 am August 07, 2023
The ATA said the agency's notice about the listening sessions to be held in September could pave the way for "remote prescribing of medically necessary controlled substances without an in-person visit."
Cone Health building
By Bill Siwicki 10:24 am August 02, 2023
With approximately 200 active peer reviewers at the health system, this significant transition has improved physician engagement and the overall process – and saved scores of hours per coordinator.
Rob Purinton of AdventHealth
By Bill Siwicki 11:02 am July 27, 2023
By having deep conversations about artificial intelligence's capabilities and limitations, the nine-state health system hopes to help its clinical and IT leaders enable a more responsible path forward for AI deployments.
Michelle Garvey Brennfleck
By Andrea Fox 11:55 am July 24, 2023
HIPAA covered entities should be proactive, requiring notification of any security incident – not just breaches – in their business agreements, says Michelle Garvey Brennfleck, healthcare corporate and regulatory shareholder at Buchanan Ingersoll & Rooney PC.
Patient logs into patient portal on laptop
By Andrea Fox 10:25 am July 21, 2023
The agencies contacted 130 health systems and telehealth providers by mail to emphasize the potential HIPAA risks of using Meta/Facebook pixel and Google Analytics tracking tools that may be "impermissibly disclosing" protected health information.
Light showing data exchange among buildings
By Andrea Fox 07:01 am July 21, 2023
United States Core Data for Interoperability Standard, version 4, is a key resource for information blocking and interoperability compliance. It is adding 20 new data elements and one new data class – facility information – to the previous standard set. 
HCA Healthcare
By Mike Miliard 11:21 am July 18, 2023
Plaintiffs say the apparent theft of identity and other information announced this past week, which could impact as many as 11 million people, happened because the health system did not use "reasonable security procedures and practices."