Compliance and Information Risk Management Blog

When embarking on a HIPAA Risk Analysis (HRA), per “Guidance on Risk Analysis Requirements under the HIPAA Security Rule”, the first step to be taken is to define the scope of the analysis by identifying all of the systems within your...

NASHVILLE, Tenn.--(BUSINESS WIRE)--Clearwater Compliance, a leading provider of hospital and health system cybersecurity and compliance solutions that are exclusively endorsed by the American Hospital Association, today announced a major upgrade...

In December 2016, the National Governors Association (NGA) released a report calling for improvements in the exchange of clinical information among healthcare providers in different states. Current conflicting and restrictive state laws, in...

In 1995 the EU adopted the Data Protection Directive regulating the exchange of personal data within the European Union and requiring the prohibition of those flows to third countries with inadequate privacy protection.  In July of 2000, the...

HIPAA Risk Analysis Tip – OCR CAP Data: Learn Why 9 of 10 Organizations Fail

There are plenty of ways to squander several million dollars, but none quite as frustrating as forking over those hefty sums to HHS’s Office for Civil Rights (OCR).  In...