Health Information Compliance Alert
Assess Your GDPR Readiness Before May 25 Release
PDF
If your practice engages in medical research, you may want to review international privacy guidelines before the European Union's General Data Protection Regulation (GDPR) goes live on May 25, 2018. Why: Stiff penalties may ensue for researchers and providers who don't follow the GDPR rules, which are significantly more restrictive about safeguarding patients' data than HIPAA, suggests the HHS Secretary's Advisory Committee on Human Research Protections (SACHRP) guidance. "A U.S.-based clinical study could be subject to the GDPR if it uses digital technology, such as wearables, mobile phones, or other personal electronic devices, to track subjects' heart rate, blood pressure, levels of physical activity, or other data points," explains the SACHRP. Warning: And even though U.S.-led research may only use American patients, they may still fall under the GDPR. For example, if those subjects travel abroad to EU nations with their mobile devices and wearables, transferring data back to the U.S., that information may fall under the jurisdiction of the EU and therefore be privy to GDPR protocols. Resource: For a closer look at the HHS Office of Human Research Protections guidance, visit www.hhs.gov/ohrp/sachrp-committee/recommendations/attachment-b-implementation-of-the-european-unions-general-data-protection-regulation-and-its-impact-on-human-subjects-research/index.html.
Health Information Compliance Alert
- Policy:
CMS Reworks MU as 'Promoting Interoperability'
Practices will face penalties for not sharing data with patients, CMS says. Rebrands, reversals, and [...] - Clip and Save:
To Notify or Not to Notify — That Is the Question
Follow this decision tree to determine breach reporting. Practices often struggle with determining if a [...] - Compliance:
Look Beyond HIPAA to Protect Health Information and Technology
Don't forget your employees health information must remain confidential, too. Although the HIPAA Privacy and [...] - Toolkit:
OCR Tool Explains PHI Disclosure Rules During an Emergency
Ask yourself these 3 questions to ensure HIPAA compliance. The care and treatment of patients [...] - Reader Question:
HIPAA Doesn't Lapse After a Patient Passes Away
Question: How long do I need to maintain a patient's private health information after that [...] - Enforcement News:
MD May See Fines and Jail Time for HIPAA Violation
Most HIPAA breaches concern the accidental release of patients' health records. In fact, the impermissible [...] - Enforcement News:
Assess Your GDPR Readiness Before May 25 Release
If your practice engages in medical research, you may want to review international privacy guidelines [...] - Enforcement News:
Alabama Joins Other States with Breach Notification Law
Providers must follow certain data breach and notification policies federally covered under HIPAA. At long [...]