The Healthcare Confidential Podcast | Episode 28 “HIPAA with Karen Perry-Weinstat”

 

 

HIPAA – the Health Insurance Portability and Accountability Act – was enacted in 1996 to protect Americans’ ability to retain their insurance coverage when between jobs and protect their health information and private data. Yet 24 years later, many healthcare providers may be uncertain about what they need to do to be in compliance with HIPAA’s regulations. Additionally, many are unaware of the critical role that cybersecurity plays in keeping patient data safe and secure, erroneously assuming that a compliant EMR is enough.

This week’s guest is Karen Perry-Weinstat. Karen is Executive Vice President and co-founder of HIPAAcraticRx, which provides a managed HIPAA compliance program for independent physicians and other healthcare practitioners. The company’s compliance-as-a-service system helps medical practices navigate HIPAA Privacy and Security regulations through a combination of assessment, analysis, remediation, documentation and training. With monitoring maintained year-round, HIPAAcraticRx ensures that its clients’ compliance status is always up-to-date.

The Take-Away: HIPAA violations may be punished with both civil fines and criminal charges. Even the smallest medical practice needs to be mindful of HIPAA regulations and should, at the very least, have Business Associate Agreements (BAA) with vendors and have an outside firm assess the security of their information technology systems.

Learn more: For information on HIPAA compliance, visit https://www.hipaacompliance-ny.com/. Learn more about cybersecurity at https://www.sandwire.com/.

Karen is happy to speak with anyone who may have questions about either of these topics. She can be reached directly at (516) 861-3000.

---

Healthcare Confidential Podcast