Contact Us
FAQs
HIPAA
Answers to some common HIPAA questions.
A. All health plans (HMO's, group health plans, etc.), health care clearinghouses (billing and repricing companies, etc.), or health care providers (doctors, dentists, hospitals, etc.) who transmit any electronic protected health information (EPHI).
A. The final security rule became effective April 21, 2003. Most covered entities were in compliance by April 21, 2005. Small health plans (those with annual receipts of $45 million or less) were required to be in compliance by April 21, 2006.
A. Clinics of all sizes must comply with the security rule. Everyone from the one-person doctor’s office to the insurance company with thousands of employees.
A. All health plans (HMO's, group health plans, etc.), health care clearinghouses (billing and repricing companies, etc.), or health care providers (doctors, dentists, hospitals, etc.) who transmit any EPHI.
A. HIPAA rules do not require covered entities to use specific security technology (for example, a specific type of firewall or Intrusion Detection System). Each covered entity must choose the appropriate technology to protect its EPHI.
A. If companies are found to be noncompliant, penalties include fines up to $25,000 for multiple violations of the same standard in a calendar year. For misusing individually identifiable health information, fines are up to $250,000 and/or imprisonment up to 10 years.