RyanCoyne

Ryan Coyne is a results-driven leader in the healthcare compliance industry, specializing in regulatory compliance, compliance training, and assisting healthcare organizations and business associates in achieving and maintaining compliance. With a deep knowledge of healthcare regulations and a keen understanding of the challenges faced by the industry, Ryan has developed a reputation as a trusted advisor and advocate for ethical and compliant practices in healthcare. Ryan has successfully advised and guided numerous healthcare organizations, business associates, and healthcare professionals on achieving and maintaining compliance with regulatory training requirements. Ryan's professional focus is using his in-depth expertise and leading a world class team of subject matter experts at ComplianceJunction in regulatory compliance to help organisations navigate the complex landscape of ensuring staff adhere to healthcare regulations. You can connect with Ryan via LinkedIn https://www.linkedin.com/in/ryancoyne/ and follow on Twitter https://twitter.com/ryancoyne

AHIMA Issues Updated HIPAA Compliance Audit Toolkit

AHIMA Issues Updated HIPAA Compliance Audit Toolkit

With Phase 2 of the Department of Health and Human Services’ Office for Civil Rights HIPAA compliance audits now well underway, the American Health Information Management Association (AHIMA) has updated its HIPAA audit readiness toolkit. Late last year, covered bodies...
$5.5 Million Paid by Memorial Healthcare System

$5.5 Million Paid by Memorial Healthcare System

The Department of Health and Human Services’ Office for Civil Rights (OCR), equaling last year’s record HIPAA settlement with Advocate Health, announced that a $5.5 million settlement had been agreed with Florida-based Memorial Healthcare Systems to settle potential...
HIPAA Violations Cost UMass $650K

HIPAA Violations Cost UMass $650K

The University of Massachusetts Amherst (UMass) has agreed to a $650,000 settlement with The Department of Health and Human Services’ Office for Civil Rights (OCR) . The settlement resolves HIPAA breaches that contributed to the university suffering a malware...
Updated ONC Security Risk Assessment Tool Released

Updated ONC Security Risk Assessment Tool Released

OCR normally to settles HIPAA compliance issues through voluntary compliance and non-punitive means, although financial penalties are now becoming more the norm. If OCR investigators find HIPAA violations, financial penalties may be issued. Fines of up to $1.5 million...
Small PHI Breaches by OCR to Increase

Small PHI Breaches by OCR to Increase

The Department of Health and Human Services’ Office for Civil Rights (OCR) has revealed it will be increasing the amount of investigations of small PHI breaches with immediate effect. violations impacting less than 500 individuals will now be subjected to tighter...
UMMC Settles 2.75 Million Dollar for HIPAA Breach

UMMC Settles 2.75 Million Dollar for HIPAA Breach

Following the 2.7 million HIPAA breach settlement with Oregon Health & Science University is news of yet another multi-million-dollar settlement with another university. The Department of Health and Human Services’ Office for Civil Rights revealed two days ago...
Townsend Violated the HIPAA Privacy Rule: OCR Ruling

Townsend Violated the HIPAA Privacy Rule: OCR Ruling

In a recent ruling the Department of Health and Human Services’ Office for Civil Rights (OCR) found that a former town administrator of Townsend, MA., violated the HIPAA Privacy Rule in June last year. This occurred when he posted an “information packet” online...
Update for Tennessee Breach Notification Laws

Update for Tennessee Breach Notification Laws

Data violation notification laws in Tennessee have been reviewed to better protect state residents. The new law requires organizations to issue breach notifications to state residents more quickly, while the range of information covered has been widened. When the new...
OCR Clarifies Permitted Uses and Disclosures of PHI

OCR Clarifies Permitted Uses and Disclosures of PHI

The Office for Civil Rights encourages suggestions from HIPAA-covered bodies about aspects of HIPAA that are unclear or need further clarification. Some of the inquiries submitted via the OCR website indicate some covered bodies are struggling to comprehend the Health...
HIPAA Violation Costs Lincare $239,800

HIPAA Violation Costs Lincare $239,800

OCR has ordered a HIPAA-covered entity to pay civil monetary penalties for HIPAA breaches. Lincare Inc. must to pay $239,800 for violations of the HIPAA Privacy Rule which were found during the investigation of a complaint about a breach of 278 patient records. The...
Law Firms are not Complying with HIPAA Rules: Survey

Law Firms are not Complying with HIPAA Rules: Survey

A recent survey carried out by Legal Workspace suggests that many are not. In fact, most health attorneys are not in adherence with HIPAA Rules and have failed to implement the appropriate technical, administrative, and physical measures to keep PHI/PII secure. Legal...
Upgrade Internet Explorer to Remain HIPAA Compliant

Upgrade Internet Explorer to Remain HIPAA Compliant

Microsoft will be stopping support and security updates for Internet Explorer 8, 9 and 10 as of Wednesday January 12, 2016. All users of Internet Explorer must switch to Internet Explorer 11, or make the switch over to Microsoft Edge, in order to continue receiving...
Oregon Breach Notification Law Now Applicable

Oregon Breach Notification Law Now Applicable

Organizations operating in Oregon must now adhere with a new data breach law that came into effect on January 1, 2016. If a data breach that exposes the personal information of more than 250 state residents is experienced, a breach notice must be filed to the Oregon...
New Guidance on Patient Data Access Issued by OCR

New Guidance on Patient Data Access Issued by OCR

The Department of Health and Human Services’ Office for Civil Rights has started 2016 with the launch of a brand new website interface, and has now followed up on previous assurance by issuing new guidance on HIPAA. This is the first in what is expected to be a...
Long Awaited Upgrade for OCR Website

Long Awaited Upgrade for OCR Website

The Department of Health and Human Services’ Office for Civil Rights website has completed a redesigned recently, upgrading with new features, a responsive design and a more user-friendly feel. The redesign was part of the Reimagined HHS.gov project. The aim was to...
Omnibus Bill Addresses Healthcare Cybersecurity

Omnibus Bill Addresses Healthcare Cybersecurity

New cybersecurity measures specifically for the healthcare industry have been added to the Omnibus bill signed into law by Congress late last week. The aim of their inclusion is to help healthcare organizations tackle the growing danger of cyberattacks, and supply...
NY Attorney General HIPAA Fine for URMC

NY Attorney General HIPAA Fine for URMC

An HIPAA fine of $15,000 has been issued by the attorney general to University of Rochester Medical Center for a breach of patient privacy that happened in March, 2015. It is not only the Office for Civil Rights that issues financial penalties for violations of HIPAA...
HIPAA Violation Fine $3.5 Million for Triple-S

HIPAA Violation Fine $3.5 Million for Triple-S

The Department of Health and Human Services’ Office for Civil Rights has agreed a HIPAA violation fine of $3.5 million with Puerto Rico Blue Cross Blue Shield licensee Triple S Management Corporation. This is the second HIPAA violation fine to be revealed in the space...
Lahey Hospital Reach Settlement with OCR

Lahey Hospital Reach Settlement with OCR

Following a data breach that occurred back in 2011, the HHS has revealed that Lahey Hospital and Medical Center has agreed to settle a case with the Office for Civil Rights (OCR) over alleged HIPAA violations for $850,000. Lahey Hospital and Medical Center has agreed...
ICD-10 Transition: WEDI Issues New Resources

ICD-10 Transition: WEDI Issues New Resources

The Workgroup for Electronic Data Interchange (WEDI) has developed two new resources to help groupsput in place the new ICD-10 codes required by the Health Insurance Portability and Accountability Act (HIPAA). The new resources, ICD-10 State Workers’ Compensation...
FitBit Launches HIPAA Compliant Wellness Platform

FitBit Launches HIPAA Compliant Wellness Platform

Fitbit, America’s leading producer of activity and fitness trackers, announced it has developed a HIPAA compliant wellness platform which it should corner the lucrative healthcare market. The company has dabbled with health and fitness trackers for the healthcare...
HIPAA-Covered Entities Set for Compliance Audits

HIPAA-Covered Entities Set for Compliance Audits

A survey recently released by Healthcare Information Security Today (HIST) shows many Covered Entities (CEs) are making the same compliance errors that were uncovered during the initial phase of audits. It has been three years since the OCR finished the pilot phase of...
Data Breach Laws Amended in Nevada and North Dakota

Data Breach Laws Amended in Nevada and North Dakota

North Dakota and Nevada have updated their breach notification laws this year, joining the growing list of states to do so. In May 2017, new laws were passed to tighten up the legislation and expand “personal information” definitions, with the two states following the...
OCR Confirms HIPAA Re-Screening Surveys Dispatched

OCR Confirms HIPAA Re-Screening Surveys Dispatched

The Department of Health and Human Services’ Office for Civil Rights has confirmed – to Fierce Health IT – that its preliminary HIPAA surveys have now been issued, marking the start of the 2015 HIPAA compliance audits. In a recent article in the National Law Review,...
How Much Does HIPAA Non-Compliance Cost?

How Much Does HIPAA Non-Compliance Cost?

The Security Rule of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) reqiores that all covered bodies put in place the appropriate administrative, physical and technical safeguards to keep PHI secure. Failure to adopt those basic minimum...
HIPAA Data Breach: How to Calculate Costs

HIPAA Data Breach: How to Calculate Costs

Calculating the cost of a HIPAA data violation is not a simple process, at least not until a number of years after a data breach happened. Corrective actions must be taken following a data breach, and the cost of notification and damage mitigation can escalate....
OCR Indicates Major Increase in HIPAA Audits

OCR Indicates Major Increase in HIPAA Audits

The second round of HIPAA compliance audits have yet to commence, the last round was  in 2012, but they are supposedly returning and will be bigger and bolder than before. The Department of Health and Human Services’ Office for Civil Rights (OCR) indicated to...
23rd National HIPAA Summit Next Week

23rd National HIPAA Summit Next Week

Government department heads and industry leaders will be attending the 23rd National HIPAA Summit to give updates on the work that has been completed in the last year and to provide information on new legislation and regulations. The summit also offers the chance for...
Aventura Hospital Damages Lawsuit Filed

Aventura Hospital Damages Lawsuit Filed

The Aventura HIPAA breach, discovered in June 2014, has lead to a lawsuit being filed by a patient of the hospital, according to a Courthouse News Service report. The lawsuit was taken by Aventura patient, Kellie Lynn Case, in the Miami Federal Court. She is claiming...