HIPAA changes likely to put onus on vendors to protect data

Health IT companies that deal with patient data are more likely to be on the hook for data breaches when highly anticipated changes to the Health Insurance Portability and Accountability Act are announced within the next few months, according to an article posted to Mass High Tech. Attorney Stephen Bernstein, with Boston-based McDermott Will & Emery LLP, told Mass High Tech in an email that companies contracted with HIPAA-covered entities should "be prepared to handle ... data securely and follow both what is stated in the business associate agreement and the requirements under the [Health Information Technology for Economic and Clinical Health] Act." Despite the expectations, however, Bernstein added that he wouldn't be shocked if the changes take such vendors by surprise. Article

Suggested Articles

Nearly 10,000 patients involved in research studies were impacted by a third-party privacy breach that may have exposed their medical diagnoses.

Veterans Health Administration medical facilities currently have a paper medical record backlog that if stacked up would be 5.15 miles high, according to the…

The Department of Health and Human Services announced proposed changes to privacy restrictions on patients' substance use treatment records.