Rachel V. Rose, J.D., MBA

Changes have been made to the process of enrolling your practice in Medicare.

Crucial information to get your year started right.

A look at the self-referral law.

'Tis the season to consider practice cybersecurity.

Ignorance of the law is no excuse.

These notices from HHS illuminate the agency's thinking on HIPAA.

The opinion concerns a proposal to pay bonuses to its employed physicians based on net profits derived from certain procedures performed by the physicians.

Currently, health data that is collected from new technologies such as wearable and smart devices, and health and wellness apps is not protected under the Health Insurance Portability and Accountability Act.

What if the algorithm was manipulated or rendered an inaccurate result in a patient care situation?

These incorrect beliefs can have you running afoul with privacy regulations.

It's like phishing, but it targets your cell phone through text messages.

Patient information or data cannot be utilized without a patient or consumer’s knowledge or consent.

Despite the outside temperatures, the U.S. Department of Justice (DOJ) and whistleblowers have been busy.

As summer temperatures reach records, so do HHS and FTC cyber enforcement initiatives.

Recent OCR enforcement action showcases business associate liability for HIPAA violations.

Patient rights do not end at death.

Congress and HHS appreciate that every patient’s life does not consist of “good time, noodle salad.”

Don't ignore these two important requirements.

Hackers continue to discover new methods of getting in the way of your practice's compliance with privacy laws.

Medical devices are a new front in the cybersecurity war against health care.

Wild behavior is pulsing through the cybersecurity landscape.

Two recent settlements underscore the FTC's status as an enforcement agency with the power to enforce consumers’ rights in relation to their sensitive information.

Cautionary tales ripped from the headlines.

The days of sticking one’s head in the sand should be long gone.

On March 23, 2010, the 60-Day Rule was enacted as Section 6402 of the Affordable Care Act.

HHS Proposed Rule – electronic transactions and privacy rule enforcement action.

All persons with boards should be making sure that the individual board members are meeting their common law fiduciary duties, including those of loyalty and care.

Don't let the holidays get in the way of legal compliance.

Cybercriminals are waiting for your guard to be down.

In order to cultivate a culture of compliance organizations need to take a “patient safety first” approach to cybersecurity.