You do realize that the corporate veil was removed in the case of
HIPPA data about 2 years ago? That was explained to me when I
went to work for a health insurance company.
We can be fined $5000 per violation (minimum fine as I recall).
And I'm about to have to take the annual certification class...
Regards,
Steve Thompson
On 09/18/2015 04:29 PM, Richard Pinion wrote:
As an employee of a company who deals with HIPPA controlled/protected data, I
feel
very uncomfortable knowing that I can be charged either with a civil or criminal
violation in the event that HIPPA data, under my control, is accidentally lost
or
stolen. And I am not talking about an intentional leak of protected patient
information. What really floored me this year, when I took the yearly HIPPA
certification online class, was HIPPA is administered under the Office of Civil
Rights.
Regardless of my personal political theology, it makes me uncomfortable that
if I offend a person or persons, the friendly neighborhood OCR representative
could be asked to "look at" my activities as relating to HIPPA compliance. I'm
sure an unbiased and diligent OCR employee might uncover some violation(s) if
they
investigated long and hard enough.
<snippage>
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
