ABYDE FOR OREGON OPTOMETRIC PHYSICIANS ASSOCIATION MEMBERS

It's time for stress-free compliance.

  • EASIEST SOFTWARE YOU’LL EVER USE

    And if we’re being honest, easy is an understatement. All companies say it, but we are so confident in the simplicity of our software that we will prove it.

  • ‘HANDS OFF’ APPROACH

    We automate it all – from notifications about training to policy generation. Can you imagine not having to set your own reminders?! Go ahead, focus on your patients – we will ping you with the important stuff.

  • CUSTOMER SUCCESS TEAM LIKE NO OTHER

    We will meet you where you are – whether that’s by phone, chat, or email. It’s tough stuff in the tech space, but our customers love us as much as we love them.

  • STATE BY STATE, LAW BY LAW

    No matter what state your practice is in, our solution is for you — from sea to shining sea. We know our stuff and dedicate ourselves to staying on top of the latest state and federal changes so you don’t have to.

  • MORE THAN JUST SOFTWARE

    With us, you get more than policies and software. We offer Master Classes, newsletters, and more to keep you up to date. At the end of the day, we are proud to lead with education.

LATEST COMPLIANCE NEWS

true price of a HIPAA Audit

What Money Doesn’t Cover: The True Price of HIPAA Non-Compliance

November 19, 2024   Did you know that the average cost of a healthcare data breach is $9.77 million?  When HIPAA investigations can lead to millions of dollars in expenses for rebuilding IT systems, legal fees, fines, and other costs, it’s easy to overlook the non-monetary consequences of an investigation in which you are found liable. When a practice is found liable, it indicates that it failed to demonstrate that it took the necessary precautions to prevent a breach. This could include not adhering to proper procedures, such as promptly providing a patient’s healthcare records to the Office for Civil Rights (OCR) or a State Attorney General.  This liability can significantly impact your practice’s reputation. The investigation can take months and make your practice subject to scrutiny.    Reputation: A Cost To Your Business  When your practice is found liable for a HIPAA violation, it can unfortunately haunt your practice. Once a HIPAA fine is announced, it is posted on the HHS website and reported by numerous compliance news sources. This news release can become a notorious stain on your practice’s reputation, as it is one of the first websites to appear when your practice is searched.  This can directly impact your organization’s success. In the digital age, over 75% of all patients search for a new provider online, and this fine will likely be one of the first things they see.    Time: The Unease of Waiting  Waiting for a response from the OCR or the state during an investigation can be overwhelming and stressful. HIPAA investigations often take several months and require hundreds of pages of documentation, and waiting for a response is an additional non-monetary cost associated with them.  In some cases, the fines related to HIPAA violations can take years to finalize. For example, a recent HIPAA fine imposed in 2024 resulted from a breach in 2017. This illustrates that investigating such breaches can take years before any resolution is reached. Even after a fine is levied, time is spent trying to recover and restore one’s reputation, which is just as challenging to manage.    Scrutiny: Monitored by the Government Many HIPAA fines include a Corrective Action Plan (CAP) or a set of requirements and years of monitoring before a practice officially completes its payment for a fine.  A CAP keeps your healthcare practice under government scrutiny for an extended period. This means that government authorities will closely monitor your practice’s operations, data security measures, and compliance with HIPAA regulations. This nonmonetary cost is another frustrating burden for practice, as it is subject to scrutiny and oversight by authorities.   Protecting Your Practice Don’t let a mistake become a detriment to the success of your practice.  Ideally, once a HIPAA fine is paid, the practice can return to normal. Unfortunately, the nonmonetary costs of an audit can continue to detriment a practice’s success.  That’s why it’s vital to put precautions in place before a significant breach can occur, and if it still occurs, the right documentation is in place to defend your practice. Utilizing a smart software solution for compliance can prepare your practice for a HIPAA investigation.  Watch our webinar, featuring compliance experts with a 100% pass rate, to learn more about the audit process and its necessary steps.   

Read More »
Ransomware HIPAA Fines

The Price of Neglect: Ransomware Fines Hit Healthcare Practices

November 7, 2024 Healthcare practices felt quite a scare on Halloween, with over half a million dollars in fines levied on medical practices. These practices were fined for not taking the necessary precautions against ransomware breaches. The two practices impacted on this day of significant fines include Plastic Surgery Associates of South Dakota in Sioux Falls (PSASD), a multi-location organization, and the Bryan County Ambulance Authority (BCAA), an Oklahoma emergency medical services provider. PSASD was fined $500,000, and BCAA was fined $90,000. These significant fines are just the precipice of the future of healthcare breaches, with ransomware breaches increasing 264% since 2018. What Happened? Major ransomware attacks unfortunately impacted both of these healthcare providers. For PSASD, a breach was discovered that infected nine workstations and two servers in July 2017. This breach impacted over ten thousand patients, putting their data at risk. The malicious actors utilized trial and error to hack into the organization’s system. The data was unable to be restored. The investigation revealed significant gaps in their compliance program, including a missing Security Risk Analysis, inadequate policies and procedures for data handling and breach reporting, and insufficient training. This $500,000 penalty also includes two years of monitoring by the Office For Civil Rights (OCR). For the BCAA, its ransomware attack began in November 2021, but wasn’t reported until May of the following year. After a breach, depending on the severity, you must notify the OCR within 60 days. Since this breach impacted over 14,000 patients or over 500 people, it is considered a large breach. Similar requirements, such as a Security Risk Analysis, adequate policies, a risk management plan, and other safeguards, were missing as found in this investigation. It’s $90,000 fine includes a Corrective Action Plan as well. Protecting Your Practice from Ransomware Ransomware attacks will continue to affect our healthcare system. Although complete immunity is impossible, there are many precautions you can take to protect your practice. Implementing the right technical safeguards, such as firewalls, antivirus software, and a qualified IT team is crucial. Additionally, you can streamline your HIPAA compliance by using intelligent software solutions that help identify your compliance needs unique to your practice. In the event of an attack, these solutions can also guide you on how to respond effectively. To learn more about these smart solutions, meet with a compliance expert today.

Read More »

READY TO BE STRESS-FREE?