Welcome to the first post in our three-part HIPAA Breach series! Our healthcare and business law firm often works with medical practices to determine whether an act involving patient privacy constitutes a violation of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) requiring notification and reporting of any breach. By law, a patient’s health information can only be used and disclosed for specific reasons. When there is a risk that patient information has been accessed, used, or disclosed in a way that is not permitted, there may be a HIPAA violation. More information about the HIPAA rules can be found on our website here and the U.S. Department of Health and Human Services’ (HHS) website here. There are generally three initial steps a practice takes in the face of a potential HIPAA breach. First, performing a risk assessment to determine whether a breach, in fact, occurred. Second, if the risk assessment reveals a probability that personal health information (PHI) was likely compromised, then the patients involved must be notified. Third, the breach must be reported to HHS’s Office of Civil Rights (OCR).
This post is the first of a three-part series on HIPAA breaches. This post explains the first step—conducting the risk assessment. Future posts will discuss the second and third steps required if the risk assessment reveals a breach occurred. Note, this post and series do not address state privacy laws or attendant state notification or reporting requirements upon a breach. If you have questions regarding this blog post, conducting a HIPAA risk analysis, your reporting and notification requirements under HIPAA, or other privacy-related matters, you may contact us at (404) 685-1662 (Atlanta) or (706) 722-7886 (Augusta), or by email, info@littlehealthlaw.com. You may also learn more about our law firm by visiting www.littlehealthlaw.com.
As a healthcare and business law firm, we work with many physicians employed 
Last week, our blog post discussed the 
Our healthcare and business law firm frequently receives questions asking about telemedicine rules in Georgia. This post intends to outline some relevant Georgia rules and regulations relating to telemedicine. Our next post will consider the rules around prescribing based on a telemedicine consult and how COVID-19’s Public Health Emergency impacts those rules. If you have questions about 
All individuals and industries have been impacted by COVID-19. As relevant to most of our clients, the medical industry has been heavily impacted. In June 2021, the Physicians Advocacy Institute (“PAI”) released the results of a study entitled: “
In our previous post reviewing the Georgia Composite Medical Board’s (“Medical Board” or “GCMB”) 
Welcome to the second installment of our business and healthcare law firm’s monthly medical board meeting review, focusing on the Georgia Composite Medical Board (“Medical Board” or “GCMB”). As a healthcare law firm with physician clients, it is our duty to stay up to date with the Medical Board’s positions and changes so as to better inform our clients. If you have 
Our healthcare and business law firm consistently works with physicians who are dealing with complications resulting from adverse reporting to the National Practitioner Data Bank (“NPDB”). Certain entities, including 
Welcome to the first installment of our business and healthcare law firm’s monthly medical board meeting review, focusing on the Georgia Composite Medical Board (“GCMB” or “Medical Board”). As a healthcare law firm with many physician clients, it is our duty to stay up to date with the Medical Board’s positions and changes so as to better inform our clients. We hope that by providing a review of the Medical Board’s monthly meeting minutes, our readers and provider clients will be able to better navigate the Medical Board successfully. If you have