The second example of a HIPAA civil case in the link below highlights the need for proper records compliance and management controls. I assume this person intended to take some work home; however, if the right controls/safeguards were in place I would think this person would have be given an encrypted CD/DVD versus hard-copies.
Regardless, we need to be trained on how to handle manual/paper records, as much as electronic.
http://blogs.healthcareinfosecurity.com/posts.php?postID=896&rf=2011-03-18-eh&hq_e=el&hq_m=1002363&hq_l=25&hq_v=bb1cf70608
No comments:
Post a Comment