COVID-19 and HIPAA and how to Legally prepare
As COVID-19 appears to have a significant impact on the elderly, it is recommended that Americans have the following three (3) forms completed in case of a medical emergency-HIPAA privacy rule , which we provide at no cost:
1. Medical Power of Attorney – Select someone to make medical decisions on your behalf.
2. Durable Power of Attorney – Select someone to make financial decisions on your behalf.
3. Last Will and Testament – Decide who receives property and assets.
About Us
Medical Device Privacy, Security & Compliance Solutions
- e-Kapenterprises Consulting. Providing Medical Device Privacy, Security & Privacy Compliance Solutions for the implementation of Health Insurance Portability and Accountability Act (HIPAA- U.S.), PHIPA (Personal Health Information Protection Act, 2004 -CA) and California Consumer Privacy Act (CCPA). Providing support of compliance related to HIPAA Privacy Rule and Security Rule. HIPAA client adviser to regulatory and accrediting bodies. Support client development of key risk management capabilities, secure backup, disaster recovery, malware and ransomware protection options and hosted VoIP phone services for remote work ,General Data Protection Regulation (GDPR) compliance, compliance-as-a-service (CaaS) California Consumer Privacy Act , cybersecurity, email encryption, privacy and security policies and procedures. Email at pierreka@e-kapenterprises.com
Medical Device Privacy, Security & Compliance Solutions
Telehealth, COVID-19, and HIPAA
- The health care sector suffers more ransomware and data breaches than any other industry. Telehealth further increases the risks for new vectors for cyberattacks and medical data theft because patient data is communicated across multiple networks and platforms.
- Specifically, HIPAA, 45 CFR Parts 160, 162, and 164, requires a health care organization to “ensure the confidentiality, integrity, and availability of all electronic protected health information” that the organization “creates, receives, maintains, or transmits.”
- The organization must also “protect against any reasonably anticipated threats or hazards to the security or integrity of such information.” HIPAA requires that secure channels are used for any communication of electronic data and that communications be monitored to prevent a data breach. Organizations should consider implementing security measures like multi-vector protection for endpoints and networks, as well as cloud-based threat intelligence services.
- Health care organization must utilize a HIPAA-compliant telehealth solution. We can provide you with best practice solutions for endpoints and secure email .
Continuous Compliance Achieved
Demonstrate access governance and regulatory compliance. Offering compliance-as-a-service (CaaS) with Antivirus , and SSL Certificates to support HIPAA privacy rule and security rule. We provide you with best practice solutions for identity and access management reporting, to attest compliance with greater accuracy, reducing threats, risk management and audits.
Electronic Signature
US Department of Health and Human Services (HHS), has determined that electronic signature can satisfy HIPAA privacy rules contract requirements. Office of Civil Rights ( OCR) requires that's there proper authentication process and procedures in place to ensure the integrity of the signatures. We can provide you with best practice solutions for electronic signature authentication along with policies and procedures.
Multi-factor Authentication - Access Control for Compliance
The need for securing password policies and implementing Multi-Factor Authentication (MFA) wherever possible is paramount as healthcare organizations are prevention focused by educating users on HIPAA privacy and security rule risk management , improving operational cyber security practices, compliance with cybersecurity law. Studies have shown the use of MFA to block 99.9 percent of all automated attacks. As threat actors commonly prey on healthcare’s workforce to gain a foothold onto the network , further adoption of MFA cross the healthcare sector is highly recommended . California Consumer Privacy Act (CCPA ) became effective Jan 1, 2020. The CCPA applies to any business, including any for-profit entity that collects consumers' personal data, which does business in California and required organizations to "implement and maintain reasonable security procedures and practices" in protecting consumer data.
Concierge Cyber®
CYBER ATTACK, WHATS YOUR RESPONSE? Concierge Cyber®
Modeled after roadside assistance, Concierge Cyber® members pay a modest annual fee that provides access to incident response during a cyberattack or data breach through a team of highly credentialed third-party service providers at pre-negotiated and substantially discounted rates.
The benefits are many, including guaranteed quick and easy access to experts in a highly personalized way, including same day appointments and phone or email access on evenings and weekends when you have a cyber event and need it most.