Healthcare data security: Focus on 'business associates'
With regulators seeking tighter control over the role of external contractors in assuring healthcare privacy and security, other third parties are offering to help audit those relationships with services from the cloud. Under the Department of Health and Human Services (HHS) HIPAA Final Omnibus Rule, contractors and subcontractors who work with healthcare providers, insurers, or other services that process patient health information (PHI) must meet HIPAA privacy rules. Referred to by regulators as "business associates," these external parties also include IT service providers.
- Readmissions: No Quick Fix to Costly Hospital Challenge
- How Top-Ranked MA Plans Earn Their Stars
- House Calls Key to Pioneer ACO Success
- How Telehealth Pays Off for Providers, Patients
- 4 Ways to Lower the Cost to Collect from Self-Pay Patients
- Ebola: Health Officials Try to Quell Front Line Fears
- Defensive Medicine Still Prevalent Despite Tort Reform
- How Hospitals Can Become 'Upstreamists'
- 'Overtreatment' Debate Circles Back to Lung Cancer Screening
- 4 Tips for Managing Employed Physicians