Medical Economics April 26, 2024
It says medical practices can’t rely on “vague” promises from company
The Medical Group Management Association (MGMA) wants clarification from the government as to who is responsible for reporting breaches of data protected under the Health Insurance Portability and Accountability Act (HIPAA) following the February cyberattack on Change Healthcare.
In an April 25th letter to the director of the U.S. Department of Health and Human Service’s Office for Civil Rights (OCR), MGMA senior vice president for government affairs Anders Gilberg cites “confusion” over how much protected data the attack has disclosed, to whom, and who will be responsible for providing breach notifications to OCR and to patients.
Gilberg acknowledges that Change Health’s parent company UnitedHealth Group’s offer in an April...