On average, nearly a quarter of people get their Christmas shopping done around Black Friday and Cyber Monday – those last-minute shoppers may consider themselves prepared, while the early birds are cringing at the thought of waiting until after Thanksgiving to cross it off their list. With the holiday season right around the corner, are you prepared? And no, we’re not just talking about lighting up your tree. 

While the holidays may not bring direct challenges to the practices’ HIPAA compliance, there are still some risks. Do you think you may miss that Cyber Monday deal or something too good to pass up online? Your practice’s devices, like computers and tablets, should only be used for work purposes and any unauthorized site may expose the practice’s electronic Protected Health Information (ePHI). 

Since it’s the giving season, let’s revisit the Security Rule to make sure you don’t end up on the OCR’s naughty list! In summary, the Security Rule ensures PHI is only accessible to those who should have access. Here are some checks and balances to be mindful of as we wrap up 2022: 

• Ensure that all your ePHI maintains confidentiality and integrity within your database or whenever transmitted 
• Be proactive in anticipating any threats – ding ding ding (or should we say jingle bells?), think about those Cyber Monday deals we just talked about 
• Round up your team and make sure everyone’s on the same page – if one reindeer is flying in the wrong direction, the sleigh won’t fly properly 

So, as much as we would like to think that everyone is rocking around the Christmas tree with their holly jolly spirit, there are still many vulnerabilities that exist. And sadly, that cyber Grinch is going to make the most of this holiday season! Save the online shopping for when you get home, from the comfort of your couch. Throw on Miracle on 34th Street, make a cup of hot chocolate, and buy that air fryer you know you’ve been wanting.