Compliance Corner

PHNS is committed to the confidentiality and security of our customers’ and their patients’ information. The weekly Compliance Corner Reminders are designed to refresh PHNS employees’ memories about their valuable roles in privacy and security under HIPAA and other federal and state laws.

Download Compliance Articles

10/02/2009
Increasing Workplace Security
Category: Update

As we head into the holiday season, here are some tips to make sure your workplace is as secure as it can be.

Download (PDF)
09/25/2009
HIPAA Violations in Arkansas
Category: Update

Three current or former employees of the St. Vincent Infirmary Medical Center (SVIMC) in Arkansas, recently pled guilty to a misdemeanor violation of the Health Insurance Portability and Accountability Act (HIPAA) based on their accessing a patient's record without any legitimate purpose.

Download (PDF)
09/18/2009
Do You Know Your Code? (Quiz)
Category: Update

The PHNS Code of Corporate Conduct is a key element of the PHNS Regulatory Compliance Program.  The Code requires the active participation of all PHNS employees.  How well do you know the Code?

Download (PDF)
09/11/2009
Compliance Corner Newsletter - September 2009
Category: Newsletter

On August 24, 2009, the U.S. Department of Health and Human Services ("HHS") published the interim final rule in the Federal Register providing for notification following a breach of unsecured protected health information ("PHI").  These breach notification regulations implement provisions of the Health Information Technology for Economic and Clinical Health ("HITECH") Act, passed as part of the American Recovery and Reinvestment Act of 2009 ("ARRA") and become incorporated into the Health Insurance Portability and Accountability Act ("HIPAA") regulations at 45 C.F.R. 164, Subpart D.

Download (PDF)
09/03/2009
Understanding Software Patches
Category: Update

Similar to the way fabric patches are used to repair holes in clothing, software patches repair holes in software programs.  Patches are updates that fix a particular problem or vulnerability within a program.

Download (PDF)
08/28/2009
Destruction of Protected Health Information (PHI)
Category: Update

According to the Secretary of the U.S. Department of Health and Human Services (HHS), there is one technology and one methodology that makes protected health information (PHI) secure: encryption and destruction.

Download (PDF)
08/24/2009
Breach Notification Final Rule
Category: Update

Today, August 24, 2009, the U.S. Department of Health and Human Services (HHS) published theinterim final rule providing for notification following a breach of unsecured protected health information (PHI).

Download (PDF)
08/14/2009
Security Best Practices Quiz
Category: Update
Download (PDF)
08/10/2009
Compliance Corner Newsletter - August 2009
Category: Newsletter

Last month we provided you with an update on the HIPAA privacy and security requirements that were part of the American Recovery and Reinvestment Act of 2009 ("ARRA").  As of press time, we are still waiting for the final guidance to be published that specifies the methodologies and technologies that make protected health information secure.  The security breach notification provisions go into effect 30 days following publication, so as soon as this guidance is published, we will provide you with a special issue of Your Compliance Connection.  Additional topics covered within this issue are Medicaid audit activities, HIPAA update, CA privacy laws update, Red Flag Rules update, and ICD-10 update.

Download (PDF)
08/07/2009
Bank Robbery Noncompliance
Category: Update

Jim Nicholson was working as a teller in a Seattle bank on July 28th when he was approached by a would-be robber.  All banks have rules that state when anyone is confronted by a robber, hand over the cash.  Banks provide regular training to tellers reinforcing the rule.  Instead of providing the cash, Nicholson threw the robber's bag on the floor, jumped over the counter and started chasing the robber.  He caught the robber and held him until police arrived. Two days later, Nicholson was terminated from his job for not following the rules.  What do you think?

Download (PDF)