Recorded Webinars

Paul R. Hales

Email & Text Messages - How to Comply with HIPAA, CMS, and the TCPA

Despite misinformation peddled on the Internet, HIPAA Covered Entities (Health Care Providers and Health Plans) can use unencrypted email and text messaging to communicate with the individuals they serve. In fact, if individuals prefer unencrypted emails and texts, Covered Entities must agree.

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

The Problem Addressed by this Webinar: Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

New HIPAA Compliance for Web Sites & Tracking Technologies, Social Media and Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability. They know the Internet and social media are today's marketplace where patients look for health care providers

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Messages and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

Email & Text Messages - How to Comply with HIPAA, CMS, and the TCPA

Despite misinformation peddled on the Internet, HIPAA Covered Entities (Health Care Providers and Health Plans) can use unencrypted email and text messaging to communicate with the individuals they serve. In fact, if individuals prefer unencrypted emails and texts, Covered Entities must agree.

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

The Problem Addressed by this Webinar: Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

New HIPAA Compliance for Web Sites & Tracking Technologies, Social Media and Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Messages and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

New HIPAA Compliance for Web Sites & Tracking Technologies, Social Media, and Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability.

Paul R. Hales

New HIPAA Compliance for Web Sites & Tracking Technologies, Social Media, and Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability.

Paul R. Hales

Health Information Privacy in 2024 - Disruption and Upheaval

In 2024 the Basics of Health Information Privacy Compliance will not just be about HIPAA and OCR investigations anymore. HIPAA still applies nation-wide to HIPAA regulated entities - Health Care Providers, Health Plans and Business Associates. But now there are new, active and aggressive enforcers protecting the privacy of Individually Identifiable Health Information: They are:

Paul R. Hales

HIPAA Rules for Business Associates & Lurking Danger for Covered Entities

This webinar is for HIPAA Business Associates (BAs) and Covered Entities (CEs). Criminals increasingly focus cyber-attacks on BAs because one hit can give them access to PHI of all the BA's customers.

Paul R. Hales

Email & Text Messages - How to Comply with HIPAA, CMS and the TCPA

Despite misinformation peddled on the Internet, HIPAA Covered Entities (Health Care Providers and Health Plans) can use unencrypted email and text messaging to communicate with the individuals they serve. In fact, if individuals prefer unencrypted emails and texts, Covered Entities must agree.

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

The Internet is jam-packed with unwitting but highly visible HIPAA violations committed by Covered Entities on their social media pages like Facebook, their organization's web site, patient testimonials they post and their responses to patient reviews - whether the review is positive or negative.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

The Internet is jam-packed with unwitting but highly visible HIPAA violations committed by Covered Entities on their social media pages like Facebook, their organization's web site, patient testimonials they post and their responses to patient reviews - whether the review is positive or negative.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HIPAA Rules for Web Sites, Social Media, & Patient Reviews

The Internet is flooded with highly visible, dangerous HIPAA violations committed unknowingly by health care providers on their websites, their social media like Facebook, and in posting or responding to Patient Reviews about the quality - good or bad - of the health care provider service.

Paul R. Hales

HIPAA Compliance for Remote Workers

Remote work involving PHI is here to stay - at least for a while: The Covid-19 Public Health Emergency has ended. But one effect of the pandemic remains - some covered entity and business associate staff continue to work at home or other remote locations where their duties involve receiving, creating, maintaining and transmitting protected health information (PHI).

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HIPAA Rules for Web Sites, Social Media, & Patient Reviews

The Internet is flooded with highly visible, dangerous HIPAA violations committed unknowingly by health care providers on their websites, their social media like Facebook, and in posting or responding to Patient Reviews about the quality - good or bad - of the health care provider service.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HIPAA Rules for Web Sites, Social Media, & Patient Reviews

The Internet is flooded with highly visible, dangerous HIPAA violations committed unknowingly by health care providers on their websites, their social media like Facebook, and in posting or responding to Patient Reviews about the quality - good or bad - of the health care provider service.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

HIPAA Compliance for Remote Workers

Covid-19 suddenly made widespread maintenance, transmission and receipt of protected health information (PHI) by people working remotely from home a new reality - and exposed that PHI to significant HIPAA breach risks. Protocols to protect PHI during remote work had to be developed quickly on the fly with little time to train or properly equip workforce members. It’s not surprising that many remote work HIPAA protocols are incomplete and slapdash patchworks because covered entities faced unprecedented patient surges and focused on meeting vital patient care obligations. Business associates had to continue serving covered entities while quickly hit by unexpected stay-at-home orders and social distancing requirements in the office.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

NIST/OCR–HIPAA Risk Analysis & Risk Management Explained Step-by-Step

Risk Analysis and Risk Management (RA-RM) are OCR’s top enforcement priority and the basis of every HIPAA Compliance program. RA-RM steps are easy to follow - if you know the steps. But the HIPAA Rules do not lay out specific RA-RM steps. According to OCR the HIPAA RA-RM steps are easy to find. They simply are certain procedures explained by the National Institute of Standards and Technology (NIST) in manuals that are free to download.




Filters