The Case for a Generative AI Acceptable Use Policy in Urgent Care

The Case for a Generative AI Acceptable Use Policy in Urgent Care

Urgent Message: Banning generative artificial intelligence can create a culture of secretive use that presents potential risks for legal liability, clinical harm, and degradation of reputation. Key Words: Generative Artificial Intelligence; Protected Health Information; HIPAA; Clinical Decision-Making Across urgent care centers, many clinicians are experimenting with generative artificial intelligence (AI) tools. The trend is measurable, not anecdotal. The American Medical Association reports that 2 in 3 physicians used AI in 2024โ€”a stunning rise from 38% …

Read More
Change Healthcare Hack Is Largest Breach Ever, Touching 100 Million

Change Healthcare Hack Is Largest Breach Ever, Touching 100 Million

What many industry observers suggested is now confirmed: The Change Healthcare cyberattack earlier this year affected personal information of 100 million people, making it the nationโ€™s largest-ever breach of healthcare data. Parent company UnitedHealthcare recently updated the Department of Health and Human Servicesโ€™ Office for Civil Rights confirming the scope of the impact. However, it could be months or years before the department completes its investigation of Change and determines a financial penalty if it …

Read More
Cyberattacks Are One Thing, Exposed Records Are Another

Cyberattacks Are One Thing, Exposed Records Are Another

Healthcare data statistics tracked by HIPAA Journal demonstrate a steady rise in breaches in the 14 years since the Department of Health and Human Servicesโ€™ Office for Civil Rights (OCR) began publishing records. As of September 24, 2024, more than 490 breaches have been reported for the year. Reportable breaches, which only include incidents involving 500 or more health records, have been tracked by OCR since 2009, when just 18 breaches were recorded. From 2009 …

Read More
New Data Breach Exposed Information on 200,000+ Urgent Care Patients

New Data Breach Exposed Information on 200,000+ Urgent Care Patients

Itโ€™s unclear whether human error or ill intent on the part of hackers is to blame, but on July 10 the records of more than 200,000 patients who had visited Premier Immediate Medical Care was exposed was โ€œleft exposedโ€ for over a month on a practice management software server. The software provider, MedEvolve, says it is notifying current and former Premier patients that their names, billing addresses, telephone numbers, insurance status, and, for some, Social …

Read More
Guard Patient Privacy Like You Would Your Ownโ€”or Face the Consequences

Guard Patient Privacy Like You Would Your Ownโ€”or Face the Consequences

Prosecutions for relatively small-time violations of patient privacy under the Health Insurance Portability and Accountability Act (HIPAA) are becoming more common, in spite of the fact that larger-scale data breaches and fraud investigations grab all the headlines.ย  One reason: Such violations may be low-hanging fruit that helps federal prosecutors win convictions more easily than more sweeping investigations. The HIPAA โ€œprivacy ruleโ€ sets standards to protect individualsโ€™ medical records and other personal health information, requiring that …

Read More
Upheld: HIPAA Violations by Themselves Are Not Ample Grounds to Sue

Upheld: HIPAA Violations by Themselves Are Not Ample Grounds to Sue

Violations of the Health Insurance Accountability and Portability Act are serious business, but they may not be sufficient grounds to sue violators, absent other circumstances, according to a decision just reached by a federal judge. A plaintiff in Washington, DC had charged that LabCorp left her protected health information (PHI) in plain sight at a local hospital, where it could be viewed by others not authorized to see it. That has been accepted as fact …

Read More
Attention, Provider: You Can Be Sued for HIPAA Violations in Some States

Attention, Provider: You Can Be Sued for HIPAA Violations in Some States

Connecticut is the latest state to decide that healthcare providers can be sued for breaches of patient confidentiality under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The Connecticut Supreme Court set the precedent when it decided that one patient’s breach of confidentiality and negligence claims against a provider could move forward. In essence, the decision paves the way for patients to use HIPAA as a standard of care and to sue providers …

Read More
Implications of HIPAA and Employee Confidentiality Rules on Positive Drug Test Results

Implications of HIPAA and Employee Confidentiality Rules on Positive Drug Test Results

Urgent message: In addition to drug testing their own employees, many urgent care centers offer drug testing as a service to other employers. Therefore, itโ€™s important to understand the laws affecting the privacy of drug screen results.ย  Alan A. Ayers, MBA, MAcc is Vice President of Strategic Initiatives for Practice Velocity, LLC and is Practice Management Editor of The Journal of Urgent Care Medicine Introduction Itโ€™s standard procedure throughout the country for employers to require …

Read More
Opportunity for Urgent Care Growth May Be Greatest in Rural Areas

Opportunity for Urgent Care Growth May Be Greatest in Rural Areas

There is a rare opportunity for a โ€œtransformative urgent care brandโ€ to lock up market share in rural areas across the U.S., according to McGuireWoods, a public affairs consultancy. In fact, that was one of the nine key takeaways from their 12th annual Healthcare Provider Conference in Charlotte this month. Observing that urgent care operators have largely focused on growth in urban areas, McGuireWoods predicted that the next big opportunity will be in underserved rural …

Read More
You Could End Up Paying Millions for Employeesโ€™ HIPAA Violations

You Could End Up Paying Millions for Employeesโ€™ HIPAA Violations

The U.S. Department of Health & Human Servicesโ€™ Office of for Civil Rights (HHS OCR) has made it very clear that itโ€™s the operatorโ€™s responsibility to police its own data policiesโ€”even among employees. Memorial Healthcare Systems (MHS) found that out the hard way, and now has to pay HHS $5.5 million to settle โ€œpotential violationsโ€ of HIPAAโ€™s Privacy and Security rules, and to implement a โ€œrobustโ€ 3-year corrective action plan and resolution agreement. HHS came …

Read More
Log In