HIPAA Training Standards Everyone Needs to Know

HIPAA Training Standards Everyone Needs to Know

HIPAA Training Standards Every Business Associate Needs to Know

Per the HIPAA Privacy Rule and HIPAA Security Rule, both Covered Entities and Business Associates, must require HIPAA training for all workforce members that access protected health information (PHI) or electronically protected health information (e-PHI) in any of its forms and should be provided “as necessary and appropriate for the members of the workforce to carry out their functions within the [organization].”

According to the Rule, training must be provided “to each new member of the workforce within a reasonable period of time after the person joins the [organization’s] workforce.” Along with all other annual compliance requirements, HIPAA training is arguably the most important. Your workforce members are your first line of defense in the event of a Breach and must be able to identify your organization’s designated HIPAA Security Officer, and have a firm understanding of the HIPAA Privacy and Security Rule. Training should also highlight the organization’s Technical, Administrative, and Physical Safeguard objective security requirements. It is best practice to provide ongoing security awareness training and, in addition to the mandatory annual training, the Privacy Rule also highlights what’s known as “periodic” training. The goal is to ensure workforce members’ knowledge of HIPAA compliance is not forgotten.

It’s advisable that HIPAA training is given to all employees as new hires during the new employee orientation period, and before new employees are exposed to or work with individually identifiable health information. This includes officers, agents, employees, temporary employees; like students, interns, volunteers, and salespeople. At a minimum, training should cover the basics of HIPAA, the basics of privacy and security requirements and restrictions, and policies and procedures. All new hires need to be provided HIPAA training and a post-test on the material covered within the training course to ensure comprehension of relevant and appropriate HIPAA policies and procedures.  Security Officers should be trained on the Breach Notification Rule, Minimum Necessary Rule, and the Organization’s policies and procedures.

The HIPAA Privacy Rule states that “An [organization] must document that the training as described [in the HIPAA Text] has been provided.” Failing to do so will be seen as “willful neglect” and will result in HIPAA violations including monetary penalties as high as $1.5 million dollars. A minor violation may only result in a corrective action plan requirement, whereas a significant data breach attributable to a lack of training will be viewed more seriously.

At Live Compliance, we make checking off your compliance requirements extremely simple.

      • Completely online, our role-based courses make training easy for remote or in-office employees.
      • Short informative video training to meet periodic training requirements
      • Depending on the size of your organization training may start as low as $79

Call us at (980) 999-1585 or visit us online at www.LiveCompliance.com/ezclaim


ABOUT EZCLAIM:
EZClaim is a leading medical billing, scheduling, and payment software provider that combines a best-in-class product with exceptional service and support. For more information, schedule a consultation today, email our experts, or call at 877.650.0904.

How to Spot, Avoid and Report Malware

How to Spot, Avoid and Report Malware

Whether you’re a one-person billing company or a multi-location organization, it’s possible that you’ve seen or heard of Malware and the potential risks associated with it and how it can cause major downtime and potential HIPAA violations due to breached information.

Criminals use malware to steal personal information, send spam, and commit fraud. Malware includes viruses, spyware, and other unwanted software that gets installed on your computer or mobile device without your consent. These programs can cause your device to crash and can be used to monitor and control your online activity. They also can make your computer vulnerable to viruses and deliver unwanted or inappropriate ads.

Here are a few, high-level quick steps you can take to spot and avoid Malware.

First, let’s talk security software.

Install and update security software, and use a firewall. Set your security software, internet browser, and operating system (like Windows or Mac OS X) to update automatically, and don’t forget to Back up your data regularly. Strong security software can prevent a hack or scam before it happens. You should install well-known software directly from the source. Sites that offer lots of different browsers, PDF readers, and other popular software for free are more likely to include malware. Read each screen when installing new software. If you don’t recognize a program or are prompted to install additional “bundled” software, decline the additional program or exit the installation process.

Don’t change your browser’s security settings and pay attention to your browser’s security warnings. Many browsers come with built-in security scanners that warn you before you visit an infected webpage or download a malicious file.

Next, watch what you’re clicking on.

Instead of clicking on a link in an email, type the URL of a trusted site directly into your browser. Scammers send emails that appear to be from companies you know and trust. The links may look legitimate, but clicking on them could download malware or send you to a scam site. Don’t open attachments in emails unless you know who sent it and what it is. Opening the wrong attachment — even if it seems to be from friends or family — can install malware on your computer.

Avoid clicking on pop-ups or banner ads about your computer’s performance! Scammers insert unwanted software into banner ads that look legitimate, especially ads about your computer’s health. Avoid clicking on these ads if you don’t know the source.

Your computer may be infected with malware if it:

    • slows down, crashes or displays repeated error messages
    • won’t shut down or restart
    • serves a multitude of pop-ups
    • serves inappropriate ads or ads that interfere with page content
    • won’t let you remove unwanted software
    • injects ads in places you typically wouldn’t see them, such as government websites
    • displays web pages you didn’t intend to visit, or sends emails you didn’t write

Other warning signs of malware include:

    • new and unexpected toolbars or icons in your browser or on your desktop
    • unexpected changes in your browser, like using a new default search engine or displaying new tabs you didn’t open
    • a sudden or repeated change in your computer’s internet home page
    • a laptop battery that drains quicker than it should

At Live Compliance, we make checking off your compliance requirements extremely simple.

  • Reliable and Effective Compliance
  • Completely online, our role-based courses make training easy for remote or in-office employees.
  • Contact-free, accurate Security Risk Assessments are conducted remotely. All devices are thoroughly analyzed regardless of location. Conducting an accurate and thorough Security Risk Assessment is not only required but is a useful tool to expose potential vulnerabilities, including those such as Password Protection.
  • Policies and Procedures curated to fit your organization ensuring employees are updated on all Workstation Use and Security Safeguards in the office, or out. Update in real-time.
  • Electronic, prepared document sending and signing to employees and business associates.

Don’t risk your company’s future, especially when we are offering a free Organization Assessment to help determine your company’s status. Call us at (980) 999-1585, or email me, Jim Johnson at Jim@LiveCompliance.com or visit www.LiveCompliance.com

For more information about DarkWeb breaches please contact us at (980) 999-1585 or email us at support@livecompliance.com

 

Best of 2021: EZClaim’s Most Read Articles

Best of 2021: EZClaim’s Most Read Articles

As we move into the new year, we wanted to take a moment to share the most popular articles of 2021. We’ve ranked them below so that you can be sure that you haven’t missed out on any resources that EZClaim clients have found useful in the past year.

Here are the most popular blog posts of 2021:

#1: Medical Billing Insights – Interview with ABA Billing Service

This interview was by far and away the most popular blog post over the past year. Jennifer and Maura provide some great insight and best practices, including their “investigative” approach to medical billing and the problem-solving skills that are necessary. Here is a summary of that article:

Are you working in the medical billing industry as a biller or an owner of a billing company? If so, the key medical billing insights and best practices that came out of our interview with Maura Jansen (VP of Operations) and Jennifer Withington (Director of Revenue) at Missing Piece Billing & Consulting Solutions will be very valuable for you to consider.

Jennifer, an expert in understanding the problem-solving techniques and the investigative nature of medical billing, offers insights that both educate and inspire. Maura, an executive member of the billing community, also added an important perspective about EZClaim’s medical billing software. The following are some highlights from our interview.

 

#2: Patient Information, Time Savings, and the EZClaim Eligibility Feature

Getting patient billing information quickly can be a big pain point, so it makes sense that this article was among the most read of the year. We walked through some tips and ticks for saving time including the EZClaim eligibility feature:

Can you add up the number of hours your billing team spent during any given week or month waiting on-hold with insurance companies to get patient billing information? Does your staff invest hours of their valuable time seeking out the smallest of details to get paid? Are you aware that integrated eligibility, through EZClaim’s medical billing software, can reduce that time on-hold to a fraction of the total?

It is estimated that the average biller can spend up to 2-hours on-hold just to get an insurance company on the phone. Add to that an average of 10 – 15 minutes to talk through a patient and most companies will only address one or two patients at a time.

 

#3: Insights from a Medical Billing Expert

In this interview with a medical billing expert and co-owner of Elite Billing Resolutions, Vicky Greenwood, we talk about dealing with the challenges in owning a billing company, some important skills that every medical biller needs, and the value of choosing the right medical billing software. In our time speaking with Vicky, we focused on topics that will aid, contribute, and help grow the skills of the medical billing community. We at EZClaim believe in highlighting the best practices in the industry and sharing those with the larger community. We encourage you to consider these insights, and then let us know what topics you would like to learn more about.

 

#4: Integrating Your EHR with EZClaim

Double data entry is frustrating. Luckily there is a better way—integrating your EHR with EZClaim.

Are you or your staff having to enter every patient into your EHR program and then again into EZClaim?  There is an easier way!  Integrating your programs will put an end to duplicate data entry, saving your practice time and money!

So, what exactly is an interface and how does it work?  An interface is a way for two programs to share information.  For EZClaim clients, the interface can be set up to share data from your EHR program to EZClaim.  Your EHR can give you specifics on how to send the data to EZClaim.

 

#5: 4 Tips for Reducing Claim Denials in 2021

Minimizing and preventing claim denials is a challenge that providers are increasingly running up against. We put together four strategies to address this growing problem:

Reducing claim denials has long been a challenge for providers. In the worst case, denied claims end up as unexpected—and sometimes unaffordable—bills for patients. The challenge only seems to be growing. A recent survey conducted by the American Hospital Association (AHA) found that 89% of respondents had seen a noticeable increase in denials over the past three years, with 51% describing the increase as “significant.”

Minimizing loss will be top of mind for providers as the COVID-19 pandemic continues to put a strain on their resources, and minimizing or preventing denials will need to be a core part of that strategy. With that in mind, we’re offering four tips to help guide revenue cycle strategies for better denial reduction in 2021.


There you have it, the most popular posts on the EZClaim blog in 2021. We look forward to keeping you up to date on everything medical billing in the new year!

Have You Performed a Security Risk Assessment?

Have You Performed a Security Risk Assessment?

Have you performed and identified your organization’s vulnerabilities with a Security Risk Assessment this year?

We understand that achieving and maintaining compliance is a delicate matter as it requires auditing, constant supervision, good staffing, adequate policies, and procedures, along with excellent reporting and investigation of any issues.

The process of assessing and maintaining compliance to any standard is the same, irrespective of the industry but especially when HIPAA compliance is required:

1. Start with a complete understanding of all the rules that you are expected to follow.
2. Establish internal policies and procedures to ensure your organization follows the rules.
3. Regularly check and assess whether or not your organization is following the rules.
4. Address issues whenever you discover the rules are not being followed.
5. Document everything.
6. Perform accurate and thorough Security Risk Assessment(s)

Are you unsure or not clear on what your organization is required to do?

THINGS TO CONSIDER:
● A Security Risk Assessment will target vulnerabilities related to what is potentially exposing Protected Health Information. Correct any potential risks identified within your Technical, Administrative, and Physical deficiencies.
● A Security Risk Assessment should be completed at least twice a year to target vulnerabilities
● Your policies and procedures should be thorough and accurate and reflect the Corrective Action Plan that is determined by the Security Risk Assessment and remediation steps should be taken to correct any deficiencies or vulnerabilities found.
● Workforce training should reflect the organization’s HIPAA Policies and Procedures

Would you like to schedule a compliance team meeting phone conference? If so, please contact support@livecompliance.com or at (980) 999-1585, and one of our compliance support team members will reach out to you.


ABOUT EZCLAIM:
As a medical billing expert, EZClaim can help the medical practice improve its revenues since it is a medical billing and scheduling software company. EZClaim provides a best-in-class product, with correspondingly exceptional service and support. Combined, EZClaim helps improve medical billing revenues. To learn more, visit EZClaim’s website, email them, or call them today at 877.650.0904.

Medical Patients as Consumers

Medical Patients as Consumers

 

In a post-2020 world, consumers now expect every purchase and transaction they make to be personalized, digital, and simple. Groceries can be delivered and paid for with one click of a button. You can try on clothing virtually, get fitted for glasses, and even visit your doctor through your mobile device. To remain competitive, consumer-driven industries have had to create new and innovative ways to engage customers.

The healthcare industry has seen this shift as patients are behaving more like consumers in their healthcare interactions. Switching to a customer-centric mindset can be tricky for the healthcare industry as balancing patient communication and adhering to HIPAA and other regulations is essential. However, these new expectations have opened the door for the medical billing industry to innovate and move forward.

For the medical billing industry, consumers are asking for simplicity and convenience, but they still want choices. According to Healthcare Finance, fewer patients are paying their medical bills by check as the shift to online payment accelerates. It is important for the medical billing industry to understand that while a large segment of older Americans still pays bills through the mail, in-person, or by check, there are growing numbers of patients who prefer an online and mobile bill payment option.

As a solution to the ever-changing environment of payment reconciliation, in 2020 EZClaim launched EZClaimPay with the following features:

    • Allows medical staff to text and email patients with payment reminders
    • Allows patients to make payments on their mobile devices or online
    • Save credit cards online for fast easy patient payments
    • Gives patients the ability to save and print their own receipts
    • Patient payments made online import directly to your EZClaim Billing program
    • Collect payments 24-hours a day with no change to your “schedule” 

In a rapidly changing world that is becoming more technology-based, the medical billing industry must keep up with current consumer trends. EZClaimPay is an excellent tool to keep your practice cutting edge and offers your patients the latest in bill-paying options. 


ABOUT EZCLAIM:
As a medical billing expert, EZClaim can help the medical practice improve its revenues since it is a medical billing and scheduling software company. EZClaim provides a best-in-class product, with correspondingly exceptional service and support. Combined, EZClaim helps improve medical billing revenues. To learn more, visit EZClaim’s website, email them, or call them today at 877.650.0904.