The Meaningful Use legislation (ARRA, HITECH Act) included many changes to HIPAA (Click here )
Here are a few key items:
- Privacy & Security – access to all health information data must be controlled — this includes laptops, thumb drives and remote access.
- Major penalties for violators – up to $1.5 million per year for violations involving willful neglect.
- Business Associates – access to health information for patients OR employees of healthcare providers. Business Associates must comply with HIPAA regulations and are subject to the same penalties. NOTE: a CPA firm may be considered a Business Associate.
HIPAA has gotten more stringent, encompasses more areas, and significantly increases the $ penalties.

Enter your email address to subscribe to this blog and
receive notifications of new posts by email.