Recent Posts

HIPAA Complaint Process Infographic Released by HHS

The Centers for Medicare & Medicaid Services (CMS) has released a new infographic on how alleged violations of the HIPAA Administrative Simplification requirements are processed. Find out what happens when a complaint is filed: If you have a complaint about a potential HIPAA Administrative Simplification violation, you can submit it to the

Read more

New HHS Fact Sheet on Direct Liability of Business Associates under HIPAA

24th May 2019 The HHS Office for Civil Rights (OCR) has issued a new fact sheet that provides a clear compilation of all provisions through which a business associate can be held directly liable for compliance with certain requirements of the HIPAA Privacy, Security, Breach Notification, and

Read more

California Consumer Privacy Act of 2018 – Bill Text

California Consumer Privacy Act of 2018 – Bill Text

The California Consumer Privacy Act (CCPA), is a bill that enhances privacy rights and consumer protection for residents of California, United States. The bill was passed by the California State Legislature and signed into law on June 28, 2018, The bill is Officially called AB-375 The CCPA becomes effective on January 1, 2020.

Read more

FDA CFR Part 11 Compliance and Benefits

The FDA regulation in 21 CFR Part 11 came into effect on August 20, 1997. It regulates drug makers, medical device manufacturers, biotech companies, biologic developers  and other FDA-regulated industries on how companies should handle electronic records and electronic signatures.The regulation does not mandate the use of

Read more

Data Protection Officer (DPO) and GDPR Compliance

Data Protection Officer (DPO) and GDPR Compliance

Appointment of DPO is mandatory requirement of GDPR compliance. Depending on the volume of personal data and the size of the organization, a in-house DPO or a virtual DPO can be appointed.

EJR 2.0. can help you stay compliant with GDPR compliance through of DIY online Toolkit or by our consulting service. We also offer virtual DPO service.

Read more

Colorado hospital failed to terminate former employee’s access to ePHI

Colorado hospital failed to terminate former employee’s access to ePHI

Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security rules requires all healthcare covered entities and their business associates to conduct security risk analysis of their IT infrastructure annually and with any change in process or system. As part of HIPAA rules, all covered entities and their business associates are required to have proper procedure in place to terminate any employees.
Pagosa Springs Medical Center (PSMC) has agreed to pay $111,400 to the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services and to adopt a substantial corrective action plan to settle potential HIPAA violations

Read more

GDPR Compliance Update

The General Data Protection Regulation (EU) 2016/679 (“GDPR”) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). GDPR applies to all business in EU countries that works with customers data of EU citizens. The law also addresses the export of personal data outside the

Read more

Florida contractor physicians’ group shares protected health information with unknown vendor without a business associate agreement

December 8,2018 – Advanced Care Hospitalists PL (ACH) has agreed to pay $500,000 to the Office for Civil Rights (OCR) of the U.S. Department of Health and Human Services (HHS) and to adopt a substantial corrective action plan to settle potential violations of the Health Insurance Portability

Read more

Allergy practice pays $125,000 to settle doctor’s disclosure of patient information to a reporter

November 26, 2018-Allergy Associates of Hartford, P.C.(Allergy Associates), has agreed to pay $125,000 to the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) and to adopt a corrective action plan to settle potential violations of the Health Insurance Portability and

Read more