HIPAA: What was Reasonable and Appropriate is not Today!

If you are scared of the blunt truth, you really should read this anyway. You can no longer simply cover your ears and close your eyes.I’m sure HHS and OCR wish the phrase “reasonable and appropriate” wasn’t ever written into the HIPAA CFRs.  I can’t think of a vaguer and more meaningless phrase, except possibly “indescribably delicious”.  An attempt to instruct providers and business associates to install and maintain security safeguards that protect patient data within your practice’ ...