HealthIT Answers November 11, 2020
By Matt Fisher, Esq
Who can be on a healthcare organization’s system and who can access patient information? HIPAA establishes very clear guidelines and expectations on that front. The baseline expectation is that only individuals who are actually part of an organization’s workforce can access information and then only to the extent connected to the individual’s role and responsibilities.
When an individual leaves an organization’s workforce, then all access should be shut off to avoid a continued ability to obtain patient information. Again, HIPAA regulations contained in the Security Rule are clear on these points.
HIPAA Settlement
What happens when these processes are either not in place or not followed? In the case of the City of New Haven (CT) Health...
Today's Sponsors
Today's Sponsor