One of the least understood and most ignored requirements in HIPAA is called “Workforce Clearance” (WC). This “addressable” requirement is part of the Security Rule’s Administrative Safeguards, and appears at 164.308(a)(3).

CEa and BAa simply must get their HIPAA “ducks in a row” as we approach 2010. The major provisions of the ARRA and the HITECH Act kick in on February 18th 2010, and HIPAA enforcement will continue to heat up. Be ready and be careful!

It seems like every new cellphone model these days comes with a camera. And many, like the Apple iPhone, also contain audio recorders. In fact, it’s getting hard to find digital devices that don’t record images, video, or audio. But for Covered Entities (CEs) and Business Associates (BAs) trying to protect PHI, these devices create serious privacy and security challenges.