Diane Evans

Cliff Note: How long to keep these privacy records

Since federal privacy rules require lots of documentation, a frequently asked question is:  How long do we have to keep all the documents that accumulate as a result of compliance with the Health Insurance Portability and Accountability Act (HIPAA)? The answer:  Six years — and that means six years after the date of a document’s […]

Cliff Note: How long to keep these privacy records Read More »

Feds send a message via one county agency

In one of the HIPAA cases most relevant to the I/DD-Residential  sector, a county agency delivering health services to low-income people settled a potential breach by paying out $215,000 to the Feds.  The agency serves a rural population of about 120,000 in Skagit County, Washington —  where nearly 18 percent of the people live below the

Feds send a message via one county agency Read More »

Cliff Note: What is Private Health Information?

That is one of the first questions that comes up about Private Health information, often referred to as PHI.  Just what do we mean by PHI? Here’s the short answer from the Feds: PHI includes any individually identifiable health information held or transmitted by an organization required to follow HIPAA rules.  Organizations required to protect

Cliff Note: What is Private Health Information? Read More »

Do your vendors even know what to do?

Residential services providers should be aware that they must hold business associates to high standards for protecting the private health information of clients.  What this means is that you must make sure contractors and vendors are protecting private health information that may be accessible to them in the course of doing business with you. In

Do your vendors even know what to do? Read More »