• Magazine
    • Past Issues
    • Subscribe
    • Change Mailing Address
    • Surveys
    • Guidelines for Authors
    • Editorial Calendar
    • Editorial Deadlines
  • Practice
    • Business Tips
    • Chiropractic Schools
    • Clinical & Technique
    • eBooks
    • eCourses
    • Infographics
    • Quizzes
    • Wellness & Nutrition
    • Personal Growth
    • Podcast
  • Resource Centers
  • Products & Services
    • Buyer’s Guide
    • Products Directory
    • Submit a Product
    • Vendor Login
  • Datebook
    • Become an Events Poster
    • Post an Event
    • View Events
  • Jobs
    • Jobs
    • Post a Job
  • Advertise
    • Advertising Information
    • Media Kit
    • Contact Us
    • Upload Advertising

Your Online Chiropractic Community

Chiropractic Economics Your Online Chiropractic Community
Subscribe
  • Home
  • Current Issue
  • News
  • Webinars
  • Chiropractic Research
  • Students
  • Coronavirus (COVID-19)

HHS to identify by name all private practices experiencing a breach affecting 500 or more

Chiropractic Economics November 19, 2010

As you know, HIPAA-covered entities experiencing a security breach are obligated to notify affected individuals, the U.S. Department of Health and Human Services (HHS), and, in some cases, the media. When a breach affects 500 or more individuals, the covered entity must report the incident to HHS within 60 days of discovery.

 

HHS, in turn, provides a brief summary of the event on its website.To date, HHS has listed private practices anonymously, identifying them only as “Private Practice.

 

” HHS took the position that private practices could not be specifically named on the website because they are identifiable as “individuals” within the meaning of the Privacy Act, which would potentially require the practice’s consent prior to listing it by name. Pursuant to the Privacy Act, HHS may designate its publication of breaches, including naming private practices, as a “routine use” of the information such that prior consent is not required for the publication.

 

Accordingly, on April 13, HHS published a Federal Register notice stating its intention to start identifying private practices by name on its breach website, designating such publication as a “routine use” of the information under the Privacy Act. Although it has yet to do so, HHS has been entitled to name private practices (both prospectively and retroactively) since May 23, 40 days from publishing its Federal Register notice.

 

Click for more info.

Related Posts

  • HHS releases 2012 justification for funding requestsHHS releases 2012 justification for funding requests
  • Audits and breaches and fines, oh my!Audits and breaches and fines, oh my!
  • DHHS releases new guidelines for EHRsDHHS releases new guidelines for EHRs
  • Coalition for Patient’s Privacy comments on EHRsCoalition for Patient’s Privacy comments on EHRs
  • HHS publishes proposed revisions to accounting of disclosures requirementsHHS publishes proposed revisions to accounting of disclosures requirements
  • HHS penalizes again for gap in HIPAA policies; more enforcement to comeHHS penalizes again for gap in HIPAA policies; more enforcement to come

Filed Under: News, Practice Management Software

Current Issue

Follow Us

  • Facebook
  • Twitter
  • Instagram
  • LinkedIn
  • YouTube logoYouTube logoYouTube

820 A1A N Highway W18,

Ponte Vedra Beach, FL 32082

Phone 904.285.6020

Fax 904.395.9118

CONTACT US »

Privacy Policy & Terms of Service

Copyright © 2021, All Rights Reserved

SUBSCRIBE TO THE MAGAZINE

Get Chiropractic Economics magazine
delivered to your home or office. Just
fill out our form to request your FREE
subscription for 20 issues a year,
including two annual Buyers Guides.

SUBSCRIBE NOW »

Latest Chiropractic News

  • World Federation of Chiropractic announces open virtual congress in September
  • Life West marks 40 years of promoting vitalistic chiropractic
    Life West College photo
  • Lifestyle change for women, even in middle age, may reduce future stroke risk
x