The Compliance Insider 

Eligible professionals (EPs), eligible hospitals, and critical access hospitals (CAHs) that cannot demonstrate meaningful use of electronic health records (EHRs) could soon face Medicare payment adjustments. But CMS... Continue Reading

In a time when so much attention is focused on issues such as cyber security and the dangers posed by evolving technology, it's easy to forget the HIPAA basics such as the need for workforce members not to gossip or... Continue Reading

OSHA recently issued its FY 2014 Budget Justification. Thedocumentspans over 130 pages and provide a wealth of information regarding the Agency's priorities. In FY 2014, OSHA proposes to continue its aggressive... Continue Reading

The Security Management Process standard, at 164.308(a)(1)(i)) in the Administrative Safeguards section of the Security Rule, requires covered entities to "[i]mplement policies and procedures to prevent, detect,... Continue Reading

The National Institute of Standards and Technology has issued a revision of its guidance to help organizations establish programs to manage computer security incidents. NIST, in Special Publication 800-61 Revision 2:... Continue Reading

A major Electronic Prescribing (eRx) Incentive Program deadline is approaching for both individual eligible professionals (EPs) and group practices participating in the Group Practice Reporting Option (GPRO). If you... Continue Reading

There's still plenty of confusion about compliance with theHIPAA Omnibus Rule, and HIPAA in general. Here's a sampling of critical issues to be aware of in your practice. Many providers are reluctant, or... Continue Reading

HHS Secretary Kathleen Sebelius recently announced that more than half of all eligible providers have been paid under the Medicare and Medicaid Electronic Health Record (EHR) Incentive Programs. More than 50 percent... Continue Reading

We recently had questions regarding cleaning up a mercury spill from a thermometer. The following instructions from OSHA and the EPA should help you if you have this occur in your practice. Small Mercury Spill... Continue Reading

Under the HIPAA Omnibus Rule, security incidents are presumed to be reportable data breaches unless healthcare organizations demonstrate through a four-factor assessment that risks are low. The factors that need... Continue Reading