Since just before HIPAA went actively into effect I’ve done a lot of HIPAA compliance work for covered entities (CEs). In the past few years I’ve done around 200 business associate (BA) information security and program reviews for just one CE, and these don’t even scratch the surface for how many BAs each CE has…
Archive for the ‘Information Security’ Category
Who Are Your Business Associates?
Thursday, October 8th, 2009Proposed HIPAA Privacy Rule Change Explicitly Makes Genetic Info PHI
Friday, October 2nd, 2009An important element of data protection compliance is knowing, identifying and inventorying the applicable information…
10 Smart Grid Consumer-to-Utility Privacy Concerns; Are There More?
Friday, September 25th, 2009I have had the great opportunity to participate in the NIST Smart Grid privacy standards group since July…
Don’t Throw Your Privacy Out The Window; Know How Your PII Is Used
Wednesday, September 23rd, 2009A couple of week’s ago I had the great opportunity and pleasure to speak with the both equally delightful and brilliant Anyck Turgeon and Scott Draughon on MyTechnologyLawyer.com about “Is encryption enough to achieve privacy?”
The feedback and followup to that show was spectacular! I got a ton of questions as a result. I will answer some of them here in the coming days. Here is the first…
How To Do Privacy Impact Assessments
Monday, September 21st, 2009Last week I was very fortunate to be able to speak at the IAPP Privacy Academy in Boston…
What Happens To Privacy During Pandemics?
Monday, September 14th, 2009I am talking to increasing numbers of privacy and information security pros who are concerned about not only getting their pandemic plans in place, but also wanting to know what kinds of privacy issues need to be addressed within the plans.
Is Encryption Enough to Achieve Privacy?
Thursday, September 10th, 2009Of course the answer is no. But there are many reasons! Tune in this afternoon at 4:00pm Pacific time to hear Anyck Turgeon, Scott Draughon and me discuss this topic and talk about encryption laws and the impacts to privacy. Here is the information about the event…
HITECH Act Virtual ToC
Friday, September 4th, 2009This was another very busy week, and I didn’t have a chance to post as much as I would have liked. Part of what kept me busy was an unusually increased amount of email…
Fired Because Photo of Surgery Room Was A “HIPAA Violation”
Friday, August 28th, 2009I received a very interesting question yesterday, and I wanted to share it and my response here because it is a great HIPAA topic to discuss that I have not seen written about before. I’ve removed the identifying information, and modified the situation details enough so that this cannot be tied to the actual situation…
Security and Privacy: Trends, Tools and Techniques
Wednesday, August 12th, 2009I’m in Houston this week giving my class “Security and Privacy: Trends, Tools and Techniques.”
