Topic
business associates
17 published works
Health Law by Hinshaw
OCR Provides Guidance on Direct Liability for Business Associates Under HIPAA
A HIPAA Business Associate ("Business Associate") is an individual or entity who performs or furnishes activity or service for or on behalf of a HIPAA Covered Entity ("Covered Entity") involving…
Data Security & Privacy
OCR Guidance May Signal Increase in Enforcement Activity Against Business Associates
In 2009, the Health Information Technology for Economic and Clinical Health (HITECH) Act, imposed direct liability on business associates for certain violations of the HIPAA Privacy, Security, Breach Notification, and…
Health Care Today
When the government may go after business associates under HIPAA
The Office of Civil Rights (OCR) within the Department of Health and Human Services (HHS) has been able to hold “business associates” directly liable for certain HIPAA violations since 2009,…
Technology Law Dispatch
New OCR fact sheet clarifies HIPAA liability for business associates
By Kimberly Gold, Vicki Tankle
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) released a fact sheet clarifying violations of HIPAA (Health Insurance Portability and Accountability Act of 1996)…
Life Sciences Legal Update
OCR Clarifies Direct Liability of Business Associates Under HIPAA
By Kimberly Gold, Vicki Tankle
The U.S. Department of Health and Human Services Office for Civil Rights (OCR) released a new fact sheet outlining and clarifying violations of HIPAA (Health Insurance Portability and Accountability Act…
Password Protected
HITECH Act Omnibus Final Rule’s Grandfather Provisions Have Expired: Are You Compliant?
As of September 23, 2014, the HITECH Act Omnibus Final Rule’s grandfather exemption for HIPAA-required business associate agreements (BAAs) has expired. The HITECH Act Final Rule was released by the…
Data Law Insights
Guess What? You’re Now Subject to HIPAA (Yes, You!): The Broad Reach of HIPAA over Business Associates
With the HIPAA Final Rule now in place, business associates as well as subcontractors must comply with the entire Security Rule (among other aspects of HIPAA) and face direct liability…
HIPAA & Health Information Technology
Ten Days, Ten Tips – Countdown to Omnibus Rule Compliance #4 and #5 (aka #8 and #9)
Where did the time go? Today’s the day – September 23, 2013. This is compliance day for most of the Omnibus Rule changes. I had a feeling this deadline would…
Healthcare Law Insights
HIPAA Update: Omnibus Rule Changes to Breach Notification and Business Associates
By Steve James
On January 17, 2013, the Office for Civil Rights of the U.S. Department of Health & Human Services issued its final rule modifying the HIPAA privacy, security, enforcement, and breach…
HIPAA & Health Information Technology
The Parade of PHI Security Breaches: With a New Large Breach, Indiana Family and Social Services Administration Marches Again
Elizabeth Litten and Michael Kline write: For the second time in less than 2 ½ years, the Indiana Family and Social Services Administration (the “FSSA”) has suffered a large breach…