Partner Reece Hirsch recently spoke to Healthcare Risk Management about the HIPAA Safe Harbor Bill, explaining that despite its name, the law does not provide absolute protection for HIPAA-covered entities and business associates—making it important for risk managers and compliance officers to review their security programs and determine qualification. “You want to make it easy for OCR [Office for Civil Rights] to see that you have applied practices that must be considered under the law,” Reece shared. “Already, OCR has begun to specifically ask whether an organization has implemented recognized security practices in its document requests at the start of an investigation.”
Read the full Healthcare Risk Management article >>
Subscription may be required.