3 ms·
You'd be surprised (or many not!) of the percentage of healthcare companies which aren't HIPAA compliant.
by odonnellryan 11y ago
You'd be surprised (or many not!) of the percentage of healthcare companies which aren't HIPAA compliant.
- josephpmay 11y agoBut that's illegal...
- angersock 11y agoWell, yes and no and yes and no. HIPAA doesn't actually protect you as much as you'd think--for example everyone who is signed on as a business partner (and similarly HIPAA qualified) can, if memory serves, view records.
- karmajunkie 11y agoThey can, but they are similarly bound to have audit records of access, restrict access to only those with a business need to the information, and most importantly, BA's have a duty to notify of a breech. Prior to HITECH it was only the provider who was obligated to notify of a breech—business associates could do pretty much whatever they wanted as far as CMS was concerned, though the data sharing agreements oftentimes had more teeth to them than HIPAA itself.
- odonnellryan 11y agoYes, "bound." However those things are never really checked.
- karmajunkie 11y agoSeeing as how I'm the guy that used to do the checking, I humbly disagree.