Proposed Revisions to the SAMHSA Regulations

Impact on Communications Between Part 2 and Non-Part 2 Providers Introduction In our ongoing engagement with behavioral health and substance abuse programs, we maintain a vigilant focus on matters relating to patient record confidentiality governed by 42 CFR Part 2, commonly known as the SAMHSA r...

Deconstructing the “HIPAA Bias.”

Understanding HIPAA and Its Interaction with State and Federal Confidentiality Laws HIPAA, the body of regulations designed to protect the confidentiality of patient health care information, has been highly effective in creating widespread awareness within health care facilities. Most staff membe...

Failing to Perform an Electronic Access Risk Analysis Before and Unauthorized Access Occurs

OCR Settlement Lessons – No Risk Assessment Exposes Provider to Liability Failure to conduct a risk assessment before a hacking incident occurred resulted in a $400,000 settlement between OCR and a Federally Qualified Health Clinic.  The FQHC filed a breach report upon learning that its employee...