<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>HIPAA Privacy &amp; Security Updates Archives - Advanced Benefit Consulting</title>
	<atom:link href="https://advancedbenefitconsulting.com/category/hipaa-privacy-security-updates/feed/" rel="self" type="application/rss+xml" />
	<link>https://advancedbenefitconsulting.com/category/hipaa-privacy-security-updates/</link>
	<description>Advanced Benefit Consulting &#38; Insurance Services, Inc. A Full Service Employee Benefit and Compliance Solution for Employers</description>
	<lastBuildDate>Mon, 23 Mar 2026 21:40:29 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>
	<item>
		<title>HIPAA Privacy &#038; Security Training &#8211; Part 2</title>
		<link>https://advancedbenefitconsulting.com/hipaa-privacy-security-training-part-2/</link>
		
		<dc:creator><![CDATA[Healthcare Benefits Specialist]]></dc:creator>
		<pubDate>Sun, 22 Mar 2026 17:07:35 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[HIPAA Training]]></category>
		<category><![CDATA[Training Events]]></category>
		<category><![CDATA[Webinar]]></category>
		<category><![CDATA[artificial intelligence]]></category>
		<category><![CDATA[California continuing education]]></category>
		<category><![CDATA[HHS]]></category>
		<category><![CDATA[HIPAA compliance]]></category>
		<category><![CDATA[HIPAA privacy training]]></category>
		<category><![CDATA[HRCI]]></category>
		<category><![CDATA[OCR]]></category>
		<category><![CDATA[privacy officer]]></category>
		<category><![CDATA[privacy work group]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=12188</guid>

					<description><![CDATA[<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-training-part-2/">HIPAA Privacy &amp; Security Training &#8211; Part 2</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<div class="et_pb_section et_pb_section_0 et_section_regular" >
				
				
				
				
				
				
				<div class="et_pb_row et_pb_row_0">
				<div class="et_pb_column et_pb_column_4_4 et_pb_column_0  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div class="et_pb_module et_pb_image et_pb_image_0">
				
				
				
				
				<span class="et_pb_image_wrap "><img fetchpriority="high" decoding="async" width="751" height="423" src="https://advancedbenefitconsulting.com/wp-content/uploads/privacy-training-part-2-june-2026.jpg" alt="HIPAA training part 2 of 3, June 2026" title="privacy training part 2 june 2026" srcset="https://advancedbenefitconsulting.com/wp-content/uploads/privacy-training-part-2-june-2026.jpg 751w, https://advancedbenefitconsulting.com/wp-content/uploads/privacy-training-part-2-june-2026-480x270.jpg 480w" sizes="(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 751px, 100vw" class="wp-image-12436" /></span>
			</div><div class="et_pb_module et_pb_text et_pb_text_0  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2 style="text-align: center;">California Privacy Training, including new AI Legislation &amp; regulations</h2>
<h3 style="text-align: center;">(part 2 of a 3-part series)</h3></div>
			</div><div class="et_pb_module et_pb_text et_pb_text_1  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2 style="text-align: center;">June 9, 2026, 10 am &#8211; 11:15 am<br />Zoom Webinar</h2>
<p><em></em></p>
<h4 style="text-align: center;">Register for REMOTE / ZOOM attendance $30 each.</h4>
<h4 style="text-align: center;">ABC Group Benefits Clients &amp; ABC Broker Co-Op Members Complimentary<br />(subject to verification)</h4></div>
			</div><div class="et_pb_button_module_wrapper et_pb_button_0_wrapper et_pb_button_alignment_center et_pb_module  dbdb-icon-on-right dbdb-icon-on-hover">
				<a class="et_pb_button et_pb_button_0 et_pb_bg_layout_light" href="https://advancedbenefitconsulting.com/wp-content/uploads/Flyer-HIPAA-Privacy-Security-Session-2-June-2026.pdf" data-icon="">Download flyer</a>
			</div><div id="register" class="et_pb_module et_pb_code et_pb_code_0">
				
				
				
				
				<div class="et_pb_code_inner"><script type="text/javascript" src="https://pci.jotform.com/jsform/260815966196167"></script></div>
			</div>
			</div>
				
				
				
				
			</div>
				
				
			</div>
<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-training-part-2/">HIPAA Privacy &amp; Security Training &#8211; Part 2</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>HIPAA Privacy &#038; Security Training, Part 1</title>
		<link>https://advancedbenefitconsulting.com/hipaa-privacy-security-training-part-1-webinar/</link>
		
		<dc:creator><![CDATA[Healthcare Benefits Specialist]]></dc:creator>
		<pubDate>Sat, 21 Mar 2026 16:58:12 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[HIPAA Training]]></category>
		<category><![CDATA[Webinar]]></category>
		<category><![CDATA[HIPAA compliance]]></category>
		<category><![CDATA[HIPAA privacy training]]></category>
		<category><![CDATA[OCR]]></category>
		<category><![CDATA[Office of Civil Rights]]></category>
		<category><![CDATA[privacy officer]]></category>
		<category><![CDATA[privacy workgroup]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=12033</guid>

					<description><![CDATA[<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-training-part-1-webinar/">HIPAA Privacy &amp; Security Training, Part 1</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<div class="et_pb_section et_pb_section_1 et_section_regular" >
				
				
				
				
				
				
				<div class="et_pb_row et_pb_row_1">
				<div class="et_pb_column et_pb_column_4_4 et_pb_column_1  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div class="et_pb_module et_pb_image et_pb_image_2">
				
				
				
				
				<span class="et_pb_image_wrap "><img decoding="async" width="1024" height="576" src="https://advancedbenefitconsulting.com/wp-content/uploads/Privacy-Training-Part-1-April-2026-graphic-1024x576.jpg" alt="HIPAA privacy training part 1" title="Privacy Training Part 1 April 2026" srcset="https://advancedbenefitconsulting.com/wp-content/uploads/Privacy-Training-Part-1-April-2026-graphic-1024x576.jpg 1024w, https://advancedbenefitconsulting.com/wp-content/uploads/Privacy-Training-Part-1-April-2026-graphic-980x551.jpg 980w, https://advancedbenefitconsulting.com/wp-content/uploads/Privacy-Training-Part-1-April-2026-graphic-480x270.jpg 480w" sizes="(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw" class="wp-image-12430" /></span>
			</div><div class="et_pb_module et_pb_text et_pb_text_2  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2 style="text-align: center;">An In-Depth Overview of HIPAA Privacy &amp; Security Laws</h2>
<h3 style="text-align: center;">(part 1 of a 3-part series)<br />Tuesday April 21, 2026<br />9am &#8211; 12:15pm<br />Zoom Webinar</h3></div>
			</div><div class="et_pb_button_module_wrapper et_pb_button_1_wrapper et_pb_button_alignment_center et_pb_module  dbdb-icon-on-right dbdb-icon-on-hover-off">
				<a class="et_pb_button et_pb_button_1 et_pb_bg_layout_light" href="https://advancedbenefitconsulting.com/wp-content/uploads/Flyer-HIPAA-Security-Session-1-April26.pdf" data-icon="">Download flyer</a>
			</div><div id="register" class="et_pb_module et_pb_code et_pb_code_1">
				
				
				
				
				<div class="et_pb_code_inner"><script type="text/javascript" src="https://pci.jotform.com/jsform/260814991388167"></script></div>
			</div>
			</div>
				
				
				
				
			</div>
				
				
			</div>
<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-training-part-1-webinar/">HIPAA Privacy &amp; Security Training, Part 1</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>HIPAA Privacy &#038; Security Training Part 3 &#8211; Electronic Security, HITECH, Cybersecurity, AI Security</title>
		<link>https://advancedbenefitconsulting.com/hipaa-privacy-security-training-part-3/</link>
		
		<dc:creator><![CDATA[Healthcare Benefits Specialist]]></dc:creator>
		<pubDate>Mon, 19 Jan 2026 17:45:21 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[HIPAA Training]]></category>
		<category><![CDATA[Training Events]]></category>
		<category><![CDATA[Webinar]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=12270</guid>

					<description><![CDATA[<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-training-part-3/">HIPAA Privacy &#038; Security Training Part 3 &#8211; Electronic Security, HITECH, Cybersecurity, AI Security</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<div class="et_pb_section et_pb_section_2 et_section_regular" >
				
				
				
				
				
				
				<div class="et_pb_row et_pb_row_2">
				<div class="et_pb_column et_pb_column_4_4 et_pb_column_2  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div class="et_pb_module et_pb_image et_pb_image_4">
				
				
				
				
				<span class="et_pb_image_wrap "><img loading="lazy" decoding="async" width="1280" height="720" src="https://advancedbenefitconsulting.com/wp-content/uploads/Privacy-Training-Part-3-2026-03-25-b.jpg" alt="HIPAA training part 3 March 25, 2025" title="HIPAA training part 3 March 25, 2025" srcset="https://advancedbenefitconsulting.com/wp-content/uploads/Privacy-Training-Part-3-2026-03-25-b.jpg 1280w, https://advancedbenefitconsulting.com/wp-content/uploads/Privacy-Training-Part-3-2026-03-25-b-980x551.jpg 980w, https://advancedbenefitconsulting.com/wp-content/uploads/Privacy-Training-Part-3-2026-03-25-b-480x270.jpg 480w" sizes="(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1280px, 100vw" class="wp-image-12289" /></span>
			</div><div class="et_pb_module et_pb_text et_pb_text_3  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2 style="text-align: center;">Electronic Security, HITECH, Cybersecurity, AI Security</h2>
<h3 style="text-align: center;">(part 3 of a 3-part series)</h3></div>
			</div><div class="et_pb_module et_pb_text et_pb_text_4  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2 style="text-align: center;">March 25, 2026, 10 am &#8211; 12 pm<br />Zoom Webinar</h2>
<p>&nbsp;</p>
<h3 style="text-align: center;"><em>This course is good for 2 hours of HRCI General Credit</em></h3>
<p style="text-align: center;"><em>This program has been pre-approved for 2 Hours HRCI General Credit toward aPHR®, aPHRi™, PHR®, PHRca®, SPHR®, GPHR®, PHRi™ and SPHRi™ recertification through HR Certification Institute® (HRCI®).</em></p>
<h3 style="text-align: center;">CA Agent CE Also Available: 2 Hours L&amp;H or 2 Hours P&amp;C<em></em></h3>
<h4 style="text-align: center;">Register for REMOTE / ZOOM attendance $49 each.</h4>
<h4 style="text-align: center;">ABC Group Benefits Clients &amp; ABC Broker Co-Op Members Complimentary<br />(subject to verification)</h4></div>
			</div><div class="et_pb_button_module_wrapper et_pb_button_2_wrapper et_pb_button_alignment_center et_pb_module  dbdb-icon-on-right dbdb-icon-on-hover">
				<a class="et_pb_button et_pb_button_2 et_pb_bg_layout_light" href="https://advancedbenefitconsulting.com/wp-content/uploads/Flyer-HIPAA-Security-Session-3-Electronic-3-26.pdf" data-icon="">Download flyer</a>
			</div><div id="register" class="et_pb_module et_pb_code et_pb_code_2">
				
				
				
				
				<div class="et_pb_code_inner"><script type="text/javascript" src="https://pci.jotform.com/jsform/260074653380152"></script></div>
			</div>
			</div>
				
				
				
				
			</div>
				
				
			</div>
<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-training-part-3/">HIPAA Privacy &#038; Security Training Part 3 &#8211; Electronic Security, HITECH, Cybersecurity, AI Security</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>S6E12 &#8211; HIPAA Security Proposed Rules; Important Changes and Updates for 2025 – Part 2</title>
		<link>https://advancedbenefitconsulting.com/s6e12-hipaa-security-proposed-rules-important-changes-2025-part-2/</link>
		
		<dc:creator><![CDATA[Healthcare Benefits Specialist]]></dc:creator>
		<pubDate>Tue, 11 Feb 2025 14:00:05 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[Podcast]]></category>
		<category><![CDATA[Season 6]]></category>
		<category><![CDATA[Aditi Group]]></category>
		<category><![CDATA[audit]]></category>
		<category><![CDATA[compliance]]></category>
		<category><![CDATA[Dorothy Cociu]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[Health and Human Services]]></category>
		<category><![CDATA[HHS]]></category>
		<category><![CDATA[HIPAA]]></category>
		<category><![CDATA[HITECH]]></category>
		<category><![CDATA[mandatory]]></category>
		<category><![CDATA[MFA]]></category>
		<category><![CDATA[pen test]]></category>
		<category><![CDATA[penetration test]]></category>
		<category><![CDATA[policies and procedures]]></category>
		<category><![CDATA[proposed regulations]]></category>
		<category><![CDATA[risk assessment]]></category>
		<category><![CDATA[Ted Flittner]]></category>
		<category><![CDATA[Ted Mayeshiba]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=11363</guid>

					<description><![CDATA[<p>The post <a href="https://advancedbenefitconsulting.com/s6e12-hipaa-security-proposed-rules-important-changes-2025-part-2/">S6E12 &#8211; HIPAA Security Proposed Rules; Important Changes and Updates for 2025 – Part 2</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<div class="et_pb_section et_pb_section_3 et_section_regular" >
				
				
				
				
				
				
				<div class="et_pb_row et_pb_row_3">
				<div class="et_pb_column et_pb_column_4_4 et_pb_column_3  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div class="et_pb_module et_pb_text et_pb_text_5  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p><a href="https://advancedbenefitconsulting.com/s6e12-hipaa-security-proposed-rules-important-changes-2025-part-2">https://advancedbenefitconsulting.com/s6e12-hipaa-security-proposed-rules-important-changes-2025-part-2</a></p></div>
			</div><div class="et_pb_module et_pb_image et_pb_image_6">
				
				
				
				
				<span class="et_pb_image_wrap "><img loading="lazy" decoding="async" width="1000" height="1000" src="https://advancedbenefitconsulting.com/wp-content/uploads/BER-S6E12-graphic-1000.jpg" alt="2025 HIPAA proposed rule changes part 2" title="BER S6E12 graphic-1000" srcset="https://advancedbenefitconsulting.com/wp-content/uploads/BER-S6E12-graphic-1000.jpg 1000w, https://advancedbenefitconsulting.com/wp-content/uploads/BER-S6E12-graphic-1000-980x980.jpg 980w, https://advancedbenefitconsulting.com/wp-content/uploads/BER-S6E12-graphic-1000-480x480.jpg 480w" sizes="(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1000px, 100vw" class="wp-image-11366" /></span>
			</div><div class="et_pb_module et_pb_text et_pb_text_6  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p>In this week’s podcast, host Dorothy Cociu continues her discussion on the HIPAA Security Proposed Rules with Ted Flittner and Ted Mayeshiba, Principals of Aditi Group. In this podcast, we walk through the contents of the Fact Sheet of the proposed rules. We discuss the requirements for written policies, procedures, plans and analyses, including the requirement for a robust risk management plan and a compliance audit, required under the proposed rule at least every 12 months. Multi-factor authentication and encryption requirements are also discussed. Join us for this informative podcast!</p></div>
			</div><div id="s5e13-show-notes" class="et_pb_module et_pb_text et_pb_text_7  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2>Show Notes</h2>
<p><a href="https://advancedbenefitconsulting.com/wp-content/uploads/Show-Notes-Aditi-Group-Managed-IT-Compliance-w-Zero-Trust-1pg.pdf" rel="attachment wp-att-11367">Show Notes &#8211; Aditi Group Managed IT &#8211; Compliance w Zero Trust-1pg</a></p>
<p><a href="https://advancedbenefitconsulting.com/wp-content/uploads/HIPAA-Security-proposed-rule-fact-sheet-2025.pdf" rel="attachment wp-att-11368">HIPAA Security proposed rule fact sheet 2025</a> </p></div>
			</div><div class="et_pb_module et_pb_text et_pb_text_8  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p><strong>Watch &amp; Listen to Video Podcast</strong></p></div>
			</div><div class="et_pb_module et_pb_video et_pb_video_0">
				
				
				
				
				<div class="et_pb_video_box"><iframe loading="lazy" title="S6E12 - HIPAA Security Proposed Rules; Important Changes and  Updates for 2025 – Part 2" width="1080" height="608" src="https://www.youtube.com/embed/n_99sWlJl7c?feature=oembed&amp;rel=0&amp;controls=1"  allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe></div>
				
			</div><div class="et_pb_module et_pb_text et_pb_text_9  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p><strong>Listen Now</strong></p></div>
			</div><div class="et_pb_module et_pb_code et_pb_code_3">
				
				
				
				
				<div class="et_pb_code_inner"><iframe loading="lazy" src="https://podcasters.spotify.com/pod/show/benefitsexecroundtable/embed/episodes/S6E12---HIPAA-Security-Proposed-Rules-Important-Changes-and-Updates-for-2025--Part-2-e2upop2" height="102px" width="400px" frameborder="0" scrolling="no">
</div>
			</div>
			</div>
				
				
				
				
			</div>
				
				
			</div>
<p>The post <a href="https://advancedbenefitconsulting.com/s6e12-hipaa-security-proposed-rules-important-changes-2025-part-2/">S6E12 &#8211; HIPAA Security Proposed Rules; Important Changes and Updates for 2025 – Part 2</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>S6E11 &#8211; HIPAA Security Proposed Rules Part 1</title>
		<link>https://advancedbenefitconsulting.com/s6e11-hipaa-security-proposed-rules-part-1/</link>
		
		<dc:creator><![CDATA[Healthcare Benefits Specialist]]></dc:creator>
		<pubDate>Tue, 04 Feb 2025 14:00:02 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[Podcast]]></category>
		<category><![CDATA[Season 6]]></category>
		<category><![CDATA[Aditi Group]]></category>
		<category><![CDATA[compliance]]></category>
		<category><![CDATA[compliance audits]]></category>
		<category><![CDATA[Dorothy Cociu]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[HIPAA requirements]]></category>
		<category><![CDATA[HIPAA Security Rule]]></category>
		<category><![CDATA[HITECH]]></category>
		<category><![CDATA[incident response]]></category>
		<category><![CDATA[Marilyn Monahan]]></category>
		<category><![CDATA[monitor]]></category>
		<category><![CDATA[patch management]]></category>
		<category><![CDATA[penetration testing]]></category>
		<category><![CDATA[policies and procedures]]></category>
		<category><![CDATA[risk assessment]]></category>
		<category><![CDATA[robust risk management]]></category>
		<category><![CDATA[Ted Flittner]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=11308</guid>

					<description><![CDATA[<p>The post <a href="https://advancedbenefitconsulting.com/s6e11-hipaa-security-proposed-rules-part-1/">S6E11 &#8211; HIPAA Security Proposed Rules Part 1</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<div class="et_pb_section et_pb_section_4 et_section_regular" >
				
				
				
				
				
				
				<div class="et_pb_row et_pb_row_4">
				<div class="et_pb_column et_pb_column_4_4 et_pb_column_4  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div class="et_pb_module et_pb_text et_pb_text_10  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p><a href="https://advancedbenefitconsulting.com/s6e11-hipaa-security-proposed-rules-part-1">https://advancedbenefitconsulting.com/s6e11-hipaa-security-proposed-rules-part-1</a></p></div>
			</div><div class="et_pb_module et_pb_image et_pb_image_7">
				
				
				
				
				<span class="et_pb_image_wrap "><img loading="lazy" decoding="async" width="1000" height="1000" src="https://advancedbenefitconsulting.com/wp-content/uploads/BER-s6e11-HIPAA-proposed-rules-part-1-1.jpg" alt="" title="BER-s6e11-HIPAA-proposed-rules-part-1" srcset="https://advancedbenefitconsulting.com/wp-content/uploads/BER-s6e11-HIPAA-proposed-rules-part-1-1.jpg 1000w, https://advancedbenefitconsulting.com/wp-content/uploads/BER-s6e11-HIPAA-proposed-rules-part-1-1-980x980.jpg 980w, https://advancedbenefitconsulting.com/wp-content/uploads/BER-s6e11-HIPAA-proposed-rules-part-1-1-480x480.jpg 480w" sizes="(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1000px, 100vw" class="wp-image-11352" /></span>
			</div><div class="et_pb_module et_pb_text et_pb_text_11  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p>In this week’s podcast, host Dorothy Cociu discusses the recently released HIPAA Security Proposed Rules with Marilyn Monahan of Monahan Law Office and Ted Flittner, Principal of Aditi Group, an IT/HIPAA Security/Cybersecurity firm. In Part 1 of this series, we discuss the proposed requirements for written policies and procedures, establishing technical and non-technical evaluations, and a robust risk management plan. Many requirements are annual, with at least one every six months. We discuss the requirement for encryption, patch management, monitoring, incident response, testing, an annual compliance audit, and more. What’s in the new proposed rules specifically? Join us for this informative podcast.</p></div>
			</div><div id="s5e13-show-notes" class="et_pb_module et_pb_text et_pb_text_12  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2>Show Notes</h2>
<p><a href="https://advancedbenefitconsulting.com/wp-content/uploads/Aditi-Group-Managed-IT-Compliance-w-Zero-Trust-1pg.pdf">About Aditi Group and Zero Trust</a></p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p></div>
			</div><div class="et_pb_module et_pb_text et_pb_text_13  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p><strong>Watch &amp; Listen to Video Podcast</strong></p></div>
			</div><div class="et_pb_module et_pb_video et_pb_video_1">
				
				
				
				
				<div class="et_pb_video_box"><iframe loading="lazy" title="S6E11 - HIPAA Security Proposed Rules Part 1" width="1080" height="608" src="https://www.youtube.com/embed/sR2ROzusq2U?feature=oembed&amp;rel=0&amp;controls=1"  allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe></div>
				
			</div><div class="et_pb_module et_pb_text et_pb_text_14  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p><strong>Listen Now</strong></p></div>
			</div><div class="et_pb_module et_pb_code et_pb_code_5">
				
				
				
				
				<div class="et_pb_code_inner"><iframe loading="lazy" src="https://podcasters.spotify.com/pod/show/benefitsexecroundtable/embed/episodes/S6E11---HIPAA-Security-Proposed-Rules-Part-1-e2ud0ro" height="102px" width="400px" frameborder="0" scrolling="no">
</div>
			</div>
			</div>
				
				
				
				
			</div>
				
				
			</div>
<p>The post <a href="https://advancedbenefitconsulting.com/s6e11-hipaa-security-proposed-rules-part-1/">S6E11 &#8211; HIPAA Security Proposed Rules Part 1</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>All NEW: HIPAA Privacy &#038; Security Training</title>
		<link>https://advancedbenefitconsulting.com/all-new-hipaa-privacy-security-training-march-april-2025/</link>
		
		<dc:creator><![CDATA[Healthcare Benefits Specialist]]></dc:creator>
		<pubDate>Fri, 24 Jan 2025 22:32:50 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[HIPAA Training]]></category>
		<category><![CDATA[In-Person]]></category>
		<category><![CDATA[Training Events]]></category>
		<category><![CDATA[compliance]]></category>
		<category><![CDATA[Health and Human Services]]></category>
		<category><![CDATA[HIPAA]]></category>
		<category><![CDATA[in-person]]></category>
		<category><![CDATA[Live training]]></category>
		<category><![CDATA[protected health information]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=11264</guid>

					<description><![CDATA[<p>The post <a href="https://advancedbenefitconsulting.com/all-new-hipaa-privacy-security-training-march-april-2025/">All NEW: HIPAA Privacy &amp; Security Training</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<div class="et_pb_section et_pb_section_5 et_section_regular" >
				
				
				
				
				
				
				<div class="et_pb_row et_pb_row_5">
				<div class="et_pb_column et_pb_column_4_4 et_pb_column_5  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div class="et_pb_module et_pb_image et_pb_image_8">
				
				
				
				
				<span class="et_pb_image_wrap "><img loading="lazy" decoding="async" width="1200" height="788" src="https://advancedbenefitconsulting.com/wp-content/uploads/ABC-Aditi-HIPAA-securitiy-training-workshop-spring-2025-1200.jpg" alt="ABC Aditi Group HIPAA privacy and security training March and April 2025" title="ABC-Aditi-HIPAA-securitiy-training-workshop-spring-2025-1200" srcset="https://advancedbenefitconsulting.com/wp-content/uploads/ABC-Aditi-HIPAA-securitiy-training-workshop-spring-2025-1200.jpg 1200w, https://advancedbenefitconsulting.com/wp-content/uploads/ABC-Aditi-HIPAA-securitiy-training-workshop-spring-2025-1200-980x644.jpg 980w, https://advancedbenefitconsulting.com/wp-content/uploads/ABC-Aditi-HIPAA-securitiy-training-workshop-spring-2025-1200-480x315.jpg 480w" sizes="(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1200px, 100vw" class="wp-image-11287" /></span>
			</div><div class="et_pb_module et_pb_text et_pb_text_15  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2 style="text-align: center;"><strong>March 18 &amp; April 23, from </strong><strong>9 am to 4 pm<br /></strong></h2>
<h3 style="text-align: center;"><span style="color: #ff0000;"><strong><em>In Person Only</em></strong></span><strong></strong></h3>
<h3 style="text-align: center;"><strong>FULL DAY PRIVACY &amp; SECURITY OFFICER AND </strong><strong>PRIVACY WORKGROUP TRAINING </strong></h3>
<p>Featuring Updates from the HIPAA Reproductive Rights Requirements and new HIPAA Security Proposed Rules, which require many covered entity and business associates actions, including:</p>
<ul>
<li>Written Policies and Procedures for electronic security, including (but not limited to):
<ul>
<li>Annual patch management policies and procedures</li>
<li>Monitoring policies and procedures</li>
<li>Security Incident Response policies and procedures</li>
</ul>
</li>
<li>Encryption required for ePHI at rest and in transit, with limited exceptions</li>
<li>Annual Compliance Audit</li>
<li>Robust Risk Management Plan</li>
<li>Health Plan Document Requirements</li>
</ul>
<p style="text-align: center;"><strong><em>And Much More!</em></strong></p>
<p style="text-align: center;"><strong><em>Requirements for HIPAA Reproductive Rights Requirements Also Covered in This Training</em></strong></p>
<h3 style="text-align: center;">Orange County- March 18, 2025</h3>
<h4 style="text-align: center;">Anaheim Hills Business Center<br />5140 E La Palma Ave, 2nd Floor Conference Room<br />Anaheim, CA 92807<br /><span style="color: #ff0000;"><em>(Limited to 24 attendees)</em></span></h4>
<h3 style="text-align: center;"><em> </em></h3>
<h3 style="text-align: center;">Los Angeles County – April 23, 2025</h3>
<h4 style="text-align: center;">Tri-West, LTD Showroom<br />11925 Pike St<br />Santa Fe Springs, CA 90670<br /><span style="color: #ff0000;"><em>(limited to 40 attendees)</em></span></h4>
<p>&nbsp;</p>
<p>These will be in-person trainings only and are expected to sell out in each location.  <em>No zoom webinar options due to the complexity of the new regulations and need for focus on the training material.</em>  Space is limited.  <strong>Attendance limited to 3 privacy work group members per location.</strong></p>
<p>&nbsp;</p>
<h3 style="text-align: center;">Register for IN-PERSON attendance $79 each. Additional registrants of same firm $69.</h3>
<h3 style="text-align: center;">Broker Co-Op Members IN-PERSON $49 each</h3>
<h3 style="text-align: center;">ABC Group Benefits Clients Complimentary<br /><em>(subject to verification, limited to 3 complimentary,<br />additional @ $49 each)</em></h3>
<p><em></em></p>
<h2 style="text-align: center;">Get CE Credit</h2>
<p>5 hours of HRCI General Credit available, 1 hour HR California Available</p>
<p>California Department of Insurance Agent CE applied for; 4 Hours Business Mgt, for session 1 &amp; 2 2 hours Life &amp; Health or P&amp;C credit for session 3.</p>
<p><em><img loading="lazy" decoding="async" src="https://advancedbenefitconsulting.com/wp-content/uploads/HRCI-recertification-provider-2025.png" width="301" height="301" alt="HRCI recertification provider" class="wp-image-11157 aligncenter size-full" /></em></p>
<p><em></em></p>
<h2>Program Details &amp; Times</h2>
<p><b>*Session One 9am &#8211; 12:15pm<br /></b> <b>An in-Depth look at the Requirements for providing compliance for HIPAA Privacy &amp; Security laws and regulations and HIPAA Reproductive Rights</b>, and an overview of real-world steps that can be taken to ensure compliance, and</p>
<p><b>HIPAA Privacy &amp; Security Enforcement Overview</b>, with updates on OCR penalties, enforcement &amp; corrective actions.</p>
<p><b>12:15-1pm – Lunch Break</b></p>
<p><b>*Session Two:  1pm- 2pm</b></p>
<p><b>California Privacy Laws &amp; similarities and differences between federal and state laws. </b>We will examine Cal-GLBA, the Confidentiality of Medical Information Act, Confidentiality of Social Security Numbers, California Consumer Protection Act and more.</p>
<p><b>*Session Three:  2pm-4pm</b></p>
<p><b>HIPAA Security, HITECH &amp; </b><b>Cybersecurity.  </b>We will provide valuable information on HIPAA Security, HITECH and Cybersecurity to keep your organization safe, both within your offices and remotely.  Includes HIPAA Security Proposed Rules update.</p></div>
			</div><div class="et_pb_button_module_wrapper et_pb_button_3_wrapper et_pb_button_alignment_center et_pb_module  dbdb-icon-on-right dbdb-icon-on-hover">
				<a class="et_pb_button et_pb_button_3 et_pb_bg_layout_light" href="https://advancedbenefitconsulting.com/hipaa2025springpdf">Download flyer</a>
			</div><div class="et_pb_module et_pb_text et_pb_text_16  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2 style="text-align: center;">Attendee Testimonials from our March, 2025 Training</h2></div>
			</div>
			</div>
				
				
				
				
			</div><div class="et_pb_row et_pb_row_6">
				<div class="et_pb_column et_pb_column_1_2 et_pb_column_6  et_pb_css_mix_blend_mode_passthrough">
				
				
				
				
				<div class="et_pb_module et_pb_testimonial et_pb_testimonial_0 clearfix  et_pb_text_align_left et_pb_bg_layout_dark et_pb_testimonial_no_image">
				
				
				
				
				
				<div class="et_pb_testimonial_description">
					<div class="et_pb_testimonial_description_inner"><div class="et_pb_testimonial_content"><p>Dorothy at Advanced Benefit Consulting at Ted from Aditi delivered an outstanding training experience. Their presentation was thorough, engaging, and incredibly well-paced. Dorothy naturally draws the audience in, encouraging questions and making the material feel approachable. She and Ted shared relatable stories that brought the content to life for the workplace. Although the training covered a large amount of information, I never once wondered when it would end;  a true testament to how engaging and effective their delivery was. I remained fully engaged from start to finish and would highly recommend their training to anyone.</p></div></div>
					<span class="et_pb_testimonial_author">Dorothy Blubaugh</span>
					<p class="et_pb_testimonial_meta"><span class="et_pb_testimonial_company">Project Independence</span></p>
				</div>
			</div>
			</div><div class="et_pb_column et_pb_column_1_2 et_pb_column_7  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div class="et_pb_module et_pb_testimonial et_pb_testimonial_1 clearfix  et_pb_text_align_left et_pb_bg_layout_dark et_pb_testimonial_no_image">
				
				
				
				
				
				<div class="et_pb_testimonial_description">
					<div class="et_pb_testimonial_description_inner"><div class="et_pb_testimonial_content"><p>Having recently attended the Advanced Benefit Consulting HIPAA Privacy Seminar, the information provided and discussed throughout the day-long Seminar was so valuable and important to our organization as a TPA that I would encourage anyone in the insurance business to place this Training at the top of their priority list. <br />Dorothy Cociu has a unique style of presenting a complex topic in a way that is interesting as well as informative. She engages the attendees and provides a good forum to ask questions.</p>
<p>Ted from Aditi Group offers the technical expertise to navigate the security side of HIPAA Privacy&#8212;and he speaks in non-technical language, so those of us who are not in IT can understand!</p></div></div>
					<span class="et_pb_testimonial_author">Mary Ann Wessel</span>
					<p class="et_pb_testimonial_meta"><span class="et_pb_testimonial_company">EBA&amp;M Corporation</span></p>
				</div>
			</div>
			</div>
				
				
				
				
			</div><div class="et_pb_row et_pb_row_7">
				<div class="et_pb_column et_pb_column_4_4 et_pb_column_8  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div id="register-hipaa-2025-mar-apr" class="et_pb_module et_pb_code et_pb_code_7">
				
				
				
				
				<div class="et_pb_code_inner"><script type="text/javascript" src="https://form.jotform.com/jsform/250425621603144"></script></div>
			</div>
			</div>
				
				
				
				
			</div>
				
				
			</div>
<p>The post <a href="https://advancedbenefitconsulting.com/all-new-hipaa-privacy-security-training-march-april-2025/">All NEW: HIPAA Privacy &amp; Security Training</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>S6E9 &#8211; HIPAA Reproductive Rights Requirements</title>
		<link>https://advancedbenefitconsulting.com/s6e9-hipaa-reproductive-rights-requirements/</link>
		
		<dc:creator><![CDATA[Healthcare Benefits Specialist]]></dc:creator>
		<pubDate>Tue, 21 Jan 2025 14:00:31 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[Podcast]]></category>
		<category><![CDATA[Season 6]]></category>
		<category><![CDATA[Attestation]]></category>
		<category><![CDATA[Business Associates]]></category>
		<category><![CDATA[definitions]]></category>
		<category><![CDATA[disclosures]]></category>
		<category><![CDATA[Dorothy Cociu]]></category>
		<category><![CDATA[ESQ]]></category>
		<category><![CDATA[health plan sponsors]]></category>
		<category><![CDATA[HIPAA]]></category>
		<category><![CDATA[Marilyn Monahan]]></category>
		<category><![CDATA[Reproductive Rights]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=11333</guid>

					<description><![CDATA[<p>The post <a href="https://advancedbenefitconsulting.com/s6e9-hipaa-reproductive-rights-requirements/">S6E9 &#8211; HIPAA Reproductive Rights Requirements</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<div class="et_pb_section et_pb_section_6 et_section_regular" >
				
				
				
				
				
				
				<div class="et_pb_row et_pb_row_8">
				<div class="et_pb_column et_pb_column_4_4 et_pb_column_9  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div class="et_pb_module et_pb_text et_pb_text_17  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p><a href="https://advancedbenefitconsulting.com/s6e9-hipaa-reproductive-rights-requirements">https://advancedbenefitconsulting.com/s6e9-hipaa-reproductive-rights-requirements<br /></a></p></div>
			</div><div class="et_pb_module et_pb_text et_pb_text_18  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p>In this week’s episode, host Dorothy Cociu discusses the requirements for Health Plan Sponsors and Business Associates for the new HIPAA Reproductive Rights rules with Marilyn Monahan, Esq, of Monahan Law Office. We discuss what’s required and when, what is prohibited related to uses and disclosures, the scope and new definitions, and the application of the prohibition, including a required Attestation. Join us for this informative podcast!</p></div>
			</div><div class="et_pb_module et_pb_image et_pb_image_9">
				
				
				
				
				<span class="et_pb_image_wrap "><img loading="lazy" decoding="async" width="1000" height="1000" src="https://advancedbenefitconsulting.com/wp-content/uploads/BER-S6E9-graphic-1000.jpg" alt="HIPAA Reproductive Rights Requirements" title="HIPAA Reproductive Rights Requirements" srcset="https://advancedbenefitconsulting.com/wp-content/uploads/BER-S6E9-graphic-1000.jpg 1000w, https://advancedbenefitconsulting.com/wp-content/uploads/BER-S6E9-graphic-1000-980x980.jpg 980w, https://advancedbenefitconsulting.com/wp-content/uploads/BER-S6E9-graphic-1000-480x480.jpg 480w" sizes="(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1000px, 100vw" class="wp-image-11257" /></span>
			</div><div class="et_pb_module et_pb_text et_pb_text_19  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p><strong>Watch &amp; Listen to Video Podcast</strong></p></div>
			</div><div class="et_pb_module et_pb_video et_pb_video_2">
				
				
				
				
				<div class="et_pb_video_box"><iframe loading="lazy" title="S6E9 - HIPAA Reproductive Rights Requirements" width="1080" height="608" src="https://www.youtube.com/embed/FmAT7zETArU?feature=oembed&amp;rel=0&amp;controls=1"  allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe></div>
				
			</div><div class="et_pb_module et_pb_text et_pb_text_20  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p><strong>Listen Now</strong></p></div>
			</div><div class="et_pb_module et_pb_code et_pb_code_8">
				
				
				
				
				<div class="et_pb_code_inner"><iframe loading="lazy" src="https://podcasters.spotify.com/pod/show/benefitsexecroundtable/embed/episodes/S6-E9---HIPAA-Reproductive-Rights-Requirements-e2tn69g" height="102px" width="400px" frameborder="0" scrolling="no"></iframe></div>
			</div>
			</div>
				
				
				
				
			</div>
				
				
			</div>
<p>The post <a href="https://advancedbenefitconsulting.com/s6e9-hipaa-reproductive-rights-requirements/">S6E9 &#8211; HIPAA Reproductive Rights Requirements</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>March 2022 HIPAA Privacy &#038; Security And Other HHS/OCR &#038; Related Federal Updates</title>
		<link>https://advancedbenefitconsulting.com/march-2022-hipaa-privacy-security-and-other-hhs-ocr-related-federal-updates/</link>
		
		<dc:creator><![CDATA[Healthcare Benefits Specialist]]></dc:creator>
		<pubDate>Fri, 04 Mar 2022 19:38:10 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[Published Articles]]></category>
		<category><![CDATA[The STATEment]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=6134</guid>

					<description><![CDATA[<p>The post <a href="https://advancedbenefitconsulting.com/march-2022-hipaa-privacy-security-and-other-hhs-ocr-related-federal-updates/">March 2022 HIPAA Privacy &#038; Security And Other HHS/OCR &#038; Related Federal Updates</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<div class="et_pb_section et_pb_section_7 et_section_regular" >
				
				
				
				
				
				
				<div class="et_pb_row et_pb_row_9">
				<div class="et_pb_column et_pb_column_4_4 et_pb_column_10  et_pb_css_mix_blend_mode_passthrough et-last-child">
				
				
				
				
				<div class="et_pb_module et_pb_text et_pb_text_21  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h2>From Dorothy Cociu, The STATEment Editor and HIPAA Privacy &amp; Security, Consultant &amp; Trainer</h2>
<h3><strong>March 2022</strong></h3></div>
			</div><div class="et_pb_module et_pb_text et_pb_text_22  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><p>There are no HIPAA, HHS or OCR updates for this issue, but the IRS has issued some important privacy-security related notices, which I thought I’d share with you. In addition, because it’s almost tax time, I wanted to provide you with some IRS-provided tips and information to assist you.</p>
<p><div id="attachment_6122" style="width: 242px" class="wp-caption alignright"><a href="https://www.camsdev.net/CAHU/Magazine/March-April-2022/"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-6122" src="https://advancedbenefitconsulting.com/wp-content/uploads/CAHU-Statement-MarApr22_001-232x300.jpg" alt="CAHIP The STATEment magazine March 2022" class="wp-image-6122 size-medium" width="232" height="300" /></a><p id="caption-attachment-6122" class="wp-caption-text">Read this article online in March-April Issue of The STATEment</p></div></p>
<h3>Third Party Verification of Facial Recognition</h3>
<p>On February 7, 2022, the IRS released in issue number IR 2022-27, a transition away from the use of third party verification involving facial recognition.</p>
<p>The IRS announced it will transition away from using a third-party service for facial recognition to help authenticate people creating new online accounts. The transition will occur over the coming weeks in order to prevent larger disruptions to taxpayers during filing season.<br />During the transition, the IRS will quickly develop and bring online an additional authentication process that does not involve facial recognition. The IRS will also continue to work with its cross-government partners to develop authentication methods that protect taxpayer data and ensure broad access to online tools.</p>
<p>“The IRS takes taxpayer privacy and security seriously, and we understand the concerns that have been raised,” said IRS Commissioner Chuck Rettig. “Everyone should feel comfortable with how their personal information is secured, and we are quickly pursuing short-term options that do not involve facial recognition.”</p>
<p>The transition announced today does not interfere with the taxpayer’s ability to file their return or pay taxes owed. During this period, the IRS will continue to accept tax filings, and it has no other impact on the current tax season. People should continue to file their taxes as they normally would.</p>
<p>&nbsp;</p>
<h3>Warning About Scammers Working Year Around</h3>
<p>On February 3, 2022, in IR-2022-25, the IRS issued a warning that scammers do indeed work year around, and stated that everyone should stay vigilant.</p>
<p>As the new year begins, the Internal Revenue Service reminds taxpayers to protect their personal and financial information throughout the year and watch out for IRS impersonation scams, along with other schemes, that try to trick people out of their hard-earned money.</p>
<p>These schemes can involve text message scams, e-mail schemes and phone scams. This tax season, the IRS also warns people to watch out for signs of potential unemployment fraud.</p>
<p>“With filing season underway, this is a prime period for identity thieves to hit people with realistic-looking emails and texts about their tax returns and refunds,” said IRS Commissioner Chuck Rettig. “Watching out for these common scams can keep people from becoming victims of identity theft and protect their sensitive personal information that can be used to file tax returns and steal refunds.”<br />The IRS, state tax agencies and the nation’s tax industry – working together in the <a href="https://www.irs.gov/newsroom/security-summit" target="_blank" rel="noopener"><em>Security Summit initiative</em></a> – have taken numerous steps since 2015 to protect taxpayers, businesses and the tax system from identity thieves. Summit partners continue to warn people to watch out for common scams and schemes this tax season.</p>
<p>&nbsp;</p>
<h3>Text message scams</h3>
<p>Last year, there was an uptick in text messages that impersonated the IRS. These scams are sent to taxpayers’ smartphones and have referenced COVID-19 and/or “stimulus payments.” These messages often contain bogus links claiming to be IRS websites or other online tools. Other than IRS Secure Access, the IRS does not use text messages to discuss personal tax issues, such as those involving bills or refunds. The IRS also will not send taxpayers messages via social media platforms.</p>
<p>If a taxpayer receives an unsolicited SMS/text that appears to be from either the IRS or a program closely linked to the IRS, the taxpayer should take a screenshot of the text message and include the screenshot in an email to <a href="mailto:phishing@irs.gov"><em>phishing@irs.gov</em></a> with the following information:</p>
<ul>
<li>Date/time/time zone they received the text message</li>
<li>Phone number that received the text message</li>
</ul>
<p>The IRS reminds everyone NOT to click links or open attachments in unsolicited, suspicious or unexpected text messages – whether from the IRS, state tax agencies or others in the tax community.</p>
<p>&nbsp;</p>
<h3>Unemployment fraud</h3>
<p>As a new tax season begins, the IRS reminds workers to watch out for claims of unemployment or other benefit payments for which they never applied. States have experienced a surge in fraudulent unemployment claims filed by organized crime rings using stolen identities. Criminals are using these stolen identities to fraudulently collect benefits.</p>
<p>Because unemployment benefits are taxable income, states issue Form 1099-G, Certain Government Payments, to recipients and to the IRS to report the amount of taxable compensation received and any withholding. Any worker receiving a fraudulent or inaccurate 1099-G should report it to the issuing state agency and request a corrected Form 1099-G.</p>
<p>For details on how to report fraud to state workforce agencies, how to obtain a corrected Form 1099-G, how to find a list of state contacts and other steps to take related to unemployment fraud, taxpayers can visit the U.S. Department of Labor’s <em><a href="https://www.dol.gov/agencies/eta/UIIDtheft" target="_blank" rel="noopener">DOL.gov/fraud page</a></em>.</p>
<p>Individuals may be victims of unemployment identity theft if they received:</p>
<ul>
<li>Mail from a government agency about an unemployment claim or payment for which they did not file. This includes unexpected payments or debit cards and could be from any state.</li>
<li>An IRS Form 1099-G reflecting unemployment benefits they weren&#8217;t expecting or didn’t receive. Box 1 on this form may show unemployment benefits they did not receive or an amount that exceeds their records for benefits they did receive. The form itself may be from a state in which they did not file for benefits.</li>
</ul>
<p>A notice from their employer indicating the employer received a request for information about an unemployment claim.</p>
<p>&nbsp;</p>
<h3>Email phishing scams</h3>
<p>The IRS does not initiate contact with taxpayers by email to request personal or financial information. The IRS initiates most contacts through regular mail delivered by the United States Postal Service.</p>
<p>If a taxpayer receives an unsolicited email that appears to be from either the IRS or a program closely linked to the IRS that is fraudulent, report it by sending it as an attachment to <em><a href="mailto:phishing@irs.gov">phishing@irs.gov</a></em>. The <em><a href="https://www.irs.gov/privacy-disclosure/report-phishing" target="_blank" rel="noopener">Report Phishing and Online Scams page</a></em> at IRS.gov provides complete details.</p>
<p>There are special circumstances when the IRS will call or come to a home or business. These visits include times when a taxpayer has an overdue tax bill, a delinquent tax return or a delinquent employment tax payment. The IRS may also visit if it needs to tour a business as part of a civil investigation (such as an audit or collection case) or during a criminal investigation. The IRS provides specific guidance on <em><a href="https://www.irs.gov/newsroom/how-to-know-its-really-the-irs-calling-or-knocking-on-your-door">how to know it’s really the IRS knocking on your door</a></em>.</p>
<p>&nbsp;</p>
<h3>Phone scams</h3>
<p>The IRS does not leave pre-recorded, urgent or threatening messages. In many variations of the phone scam, victims are told if they do not call back, a warrant will be issued for their arrest. Other verbal threats include law-enforcement agency intervention, deportation or revocation of licenses.<br />Criminals can fake or “spoof” caller ID numbers to appear to be anywhere in the country, including from an IRS office. This prevents taxpayers from being able to verify the true call number. Fraudsters also have spoofed local sheriff’s offices, state departments of motor vehicles, federal agencies and others to convince taxpayers the call is legitimate.</p>
<p>The IRS (and its authorized private collection agencies) will never:</p>
<ul>
<li>Call to demand immediate payment using a specific payment method such as a prepaid debit card, gift card or wire transfer. The IRS does not use these methods for tax payments.</li>
<li>Threaten to immediately bring in local police or other law-enforcement groups to have the taxpayer arrested for not paying.</li>
<li>Demand that taxes be paid without giving the taxpayer the opportunity to question or appeal the amount owed.</li>
<li>Ask for credit or debit card numbers over the phone.</li>
</ul>
<p>Generally, the IRS will first mail a bill to any taxpayer who owes taxes. All tax payments should only be made payable to the U.S. Treasury and <strong>checks should never be made payable to third parties</strong>.</p>
<p>For anyone who doesn’t owe taxes and has no reason to think they do:</p>
<p>Do not give out any information. Hang up immediately.</p>
<p>Contact the Treasury Inspector General for Tax Administration to report the call at <a href="https://www.treasury.gov/tigta/reportcrime_misconduct.shtml" target="_blank" rel="noopener"><em>IRS Impersonation Scam Reporting</em></a>.</p>
<p>Report the caller ID and/or callback number to the IRS by sending it to <a href="mailto:phishing@irs.gov"><em>phishing@irs.gov</em></a> (Subject: IRS Phone Scam).</p>
<p><a href="https://reportfraud.ftc.gov/#/" target="_blank" rel="noopener"><em>Report it to the Federal Trade Commission on FTC.gov</em></a>. Add &#8220;IRS Telephone Scam&#8221; in the notes.</p>
<p>For anyone who owes tax or thinks they do:<br /><a href="https://www.irs.gov/payments/your-online-account" target="_blank" rel="noopener"><em>View tax account information online at IRS.gov</em></a> to see the actual amount owed. Taxpayers can also review their payment options.</p>
<ul>
<li>Call the number on the billing notice or</li>
<li>Call the IRS at 800-829-1040. IRS employees can help.</li>
</ul>
<h3></h3>
<h3>Help for victims of ID theft</h3>
<p>Unfortunately, scams and schemes can often lead to identity theft. While identity theft can have many consequences, the IRS focuses on tax-related identity theft.</p>
<p>Tax-related identity theft occurs when someone uses an individual’s stolen Social Security number (SSN) to file a tax return claiming a fraudulent refund. Taxpayers may be unaware of this activity until they e-file a tax return and discover that a return has already been filed using their SSN. Or, the IRS may send them a letter saying it has identified a suspicious return using their SSN.</p>
<p>If a taxpayer learns their SSN has been compromised, or they know or suspect they are a victim of tax-related identity theft, the IRS recommends these additional steps:</p>
<ul>
<li>Individuals should respond immediately to any IRS notice; call the number provided.</li>
</ul>
<p>Taxpayers should complete <a href="https://www.irs.gov/pub/irs-pdf/f14039.pdf"><em>IRS Form 14039, Identity Theft Affidavit (.pdf)</em></a>, if an e-file tax return rejects because of a duplicate filing under their SSN or they are instructed to do so by the IRS. Individuals can use a fillable form at IRS.gov, then print and attach the form to their paper return and mail according to instructions.</p>
<ul>
<li>Victims of tax-related identity theft should continue to pay their taxes and file their tax return, even if they must do so by paper.</li>
<li>Taxpayers who previously contacted the IRS about tax-related identity theft and did not have a resolution should call for specialized assistance at 1-800-908-4490.</li>
</ul>
<p>More information is available at: <a href="https://www.irs.gov/identity-theft-central" target="_blank" rel="noopener"><em>IRS.gov/identitytheft</em></a> or the Federal Trade Commission’s <a href="https://www.identitytheft.gov/#/" target="_blank" rel="noopener"><em>identitytheft.gov</em></a>.</p>
<p>The official IRS website is IRS.gov. People should be aware of imitation websites ending in .com. This applies to other IRS tools, too, like <a href="https://www.irs.gov/filing/free-file-do-your-federal-taxes-for-free" target="_blank" rel="noopener"><em>Free File</em></a> — they all end in .gov.</p>
<p>For more information, visit<a href="https://www.irs.gov/newsroom/tax-scams-consumer-alerts" target="_blank" rel="noopener"><em> Tax Scams and Consumer Alerts</em></a> on IRS.gov. Additional information about tax scams is available on <a href="https://www.irs.gov/newsroom/irs-social-media" target="_blank" rel="noopener"><em>IRS social media sites</em></a>, including YouTube videos.</p>
<p>&nbsp;</p>
<h3>More information:</h3>
<h4><em><a href="https://www.irs.gov/taxpayer-bill-of-rights" target="_blank" rel="noopener">Taxpayer Bill of Rights</a></em></h4>
<p><em><strong>Tax Time Guide: American Rescue Plan changes can boost refunds for many families; people should file even if they haven’t for years</strong></em></p>
<p>In IRS Release 2022-29, dated February 8, 2022, The IRS provided this information on refunds:</p>
<p>The Internal Revenue Service today urged Americans to file a 2021 federal income tax return so they can take advantage of key tax benefits included in the American Rescue Plan and other recent legislation.</p>
<p>Often, individuals and families <a href="https://www.irs.gov/help/ita/does-my-childdependent-qualify-for-the-child-tax-credit-or-the-credit-for-other-dependents" target="_blank" rel="noopener"><em>can get these expanded tax benefits</em></a>, even if they have little or no income from a job, business or other source. This means that many people who don’t normally need to file a return should consider doing so this year. Because claiming these benefits could result in tax refunds for many people, individuals should <a href="https://www.irs.gov/filing/e-file-options" target="_blank" rel="noopener"><em>file an accurate return electronically</em></a> and choose <a href="https://www.irs.gov/refunds/get-your-refund-faster-tell-irs-to-direct-deposit-your-refund-to-one-two-or-three-accounts" target="_blank" rel="noopener"><em>direct deposit</em></a> to avoid processing delays and speed delivery of their refund.</p>
<p>&nbsp;</p>
<h3>Expanded tax benefits</h3>
<p>A new fact sheet, <a href="https://www.irs.gov/newsroom/irs-expanded-credits-for-families-highlight-tax-changes-for-2021-many-people-who-dont-normally-file-should-file-this-year" target="_blank" rel="noopener"><em>FS-2022-10</em></a>, available now on IRS.gov, describes many of these expanded tax benefits. But the IRS emphasized that these benefits are only available to people who file a 2021 federal income tax return. Benefits include:</p>
<p>An expanded <a href="https://www.irs.gov/credits-deductions/2021-child-tax-credit-and-advance-child-tax-credit-payments-frequently-asked-questions" target="_blank" rel="noopener"><em>Child Tax Credit</em></a>: Families can claim this credit, even if they received monthly advance payments during the last half of 2021.</p>
<p>An increased <a href="https://www.irs.gov/credits-deductions/individuals/child-and-dependent-care-credit-information" target="_blank" rel="noopener"><em>Child and Dependent Care Credit</em></a>: Families who pay for daycare so they can work or look for work can get a tax credit worth up to $4,000 for one qualifying person and $8,000 for two or more qualifying persons.</p>
<p>A more generous <a href="https://www.irs.gov/credits-deductions/individuals/earned-income-tax-credit-eitc" target="_blank" rel="noopener"><em>Earned Income Tax Credit</em></a>: The American Rescue Plan boosted the EITC for childless workers. There are also changes that can help low- and moderate-income families with children.</p>
<p>The<a href="https://www.irs.gov/newsroom/recovery-rebate-credit" target="_blank" rel="noopener"><em> Recovery Rebate Credit</em></a>: Those who missed out on last year’s third-round of Economic Impact Payments (EIP3), also known as stimulus payments, may be eligible to claim the RRC. This credit can also help eligible people whose EIP3 was less than the full amount, including those who welcomed a child in 2021. <a href="https://www.irs.gov/newsroom/expanded-tax-benefits-help-individuals-and-businesses-give-to-charity-during-2021-deductions-up-to-600-available-for-cash-donations-by-non-itemizers" target="_blank" rel="noopener"><em>A deduction for gifts to charity</em></a>: The majority of taxpayers who take the standard deduction can deduct eligible cash contributions they made during 2021. Married couples filing jointly can deduct up to $600 in cash donations and individual taxpayers can deduct up to $300 in donations. In addition, itemizers who make large cash donations often qualify to deduct the full amount in 2021.</p>
<p>See the fact sheet for more information.</p>
<p>The IRS reminds early filers that by law, the agency cannot issue EITC refunds before mid-February. The same rule applies to refunds that include the Additional Child Tax Credit (ACTC). This year, the ACTC is typically claimed by Americans abroad who did not have a main home in the United States for more than half of 2021. Normally, the mid-February restriction does not apply to the Refundable Child Tax Credit (RCTC) claimed by people who had a main home in the U.S., unless they also claim the EITC.</p>
<p>&nbsp;</p>
<h3>Helpful reminders</h3>
<p>The IRS urges everyone to make sure they have all their year-end statements in hand before filing their 2021 return. Besides all W-2s and 1099s, this includes two statements issued by the IRS &#8212; <a href="https://www.irs.gov/individuals/understanding-your-letter-6419" target="_blank" rel="noopener"><em>Letter 6419</em></a>, showing their total advance Child Tax Credit payments, and Letter 6475, showing their total EIP3 payments. Individuals can also use <a href="https://www.irs.gov/payments/your-online-account" target="_blank" rel="noopener"><em>IRS Online Account</em></a> to see the total amounts of their third round of Economic Impact Payments or advance Child Tax Credit payments. Married spouses who received joint payments will each need to sign into their own account to retrieve their separate amounts.</p>
<p>For most Americans, the <a href="https://www.irs.gov/help/ita/what-is-the-due-date-of-my-federal-tax-return-or-am-i-eligible-to-request-an-extension" target="_blank" rel="noopener"><em>tax-filing deadline</em></a> is April 18, 2022. For residents of Maine and Massachusetts, the deadline is April 19, 2022. For Americans who live and work abroad, it’s June 15, 2022. Anyone who needs more time to file can get an <a href="https://www.irs.gov/forms-pubs/extension-of-time-to-file-your-tax-return" target="_blank" rel="noopener"><em>automatic extension</em></a> until Oct. 17, 2022.</p>
<p>Taxpayers can find answers to questions, forms and instructions and easy-to-use tools online at IRS.gov. They can use these resources to get help when it’s needed at home, at work or on the go.</p>
<p>This news release is part of a series called the <a href="https://www.irs.gov/newsroom/tax-time-guide" target="_blank" rel="noopener"><em>Tax Time Guide</em></a>, a resource to help taxpayers file an accurate tax return. Additional help is available in <a href="https://www.irs.gov/publications/p17" target="_blank" rel="noopener"><em>Publication 17</em></a>, Your Federal Income Tax.</p>
<p>I’ll be sure to provide additional Agency Updates in the next issue of The Statement! ##</p></div>
			</div><div class="et_pb_module et_pb_text et_pb_text_23  et_pb_text_align_left et_pb_bg_layout_light">
				
				
				
				
				<div class="et_pb_text_inner"><h3>From Dorothy Cociu, The STATEment Editor and HIPAA Privacy &amp; Security, Consultant &amp; Trainer</h3>
<p><strong>March 2022</strong></p>
<p>There are no HIPAA, HHS or OCR updates for this issue, but the IRS has issued some important privacy-security related notices, which I thought I’d share with you. In addition, because it’s almost tax time, I wanted to provide you with some IRS-provided tips and information to assist you.</p>
<p>&nbsp;</p>
<h3>Third Party Verification of Facial Recognition</h3>
<p>On February 7, 2022, the IRS released in issue number IR 2022-27, a transition away from the use of third party verification involving facial recognition.</p>
<p>The IRS announced it will transition away from using a third-party service for facial recognition to help authenticate people creating new online accounts. The transition will occur over the coming weeks in order to prevent larger disruptions to taxpayers during filing season.<br />During the transition, the IRS will quickly develop and bring online an additional authentication process that does not involve facial recognition. The IRS will also continue to work with its cross-government partners to develop authentication methods that protect taxpayer data and ensure broad access to online tools.</p>
<p>“The IRS takes taxpayer privacy and security seriously, and we understand the concerns that have been raised,” said IRS Commissioner Chuck Rettig. “Everyone should feel comfortable with how their personal information is secured, and we are quickly pursuing short-term options that do not involve facial recognition.”</p>
<p>The transition announced today does not interfere with the taxpayer’s ability to file their return or pay taxes owed. During this period, the IRS will continue to accept tax filings, and it has no other impact on the current tax season. People should continue to file their taxes as they normally would.</p>
<p>&nbsp;</p>
<h3>Warning About Scammers Working Year Around</h3>
<p>On February 3, 2022, in IR-2022-25, the IRS issued a warning that scammers do indeed work year around, and stated that everyone should stay vigilant.</p>
<p>As the new year begins, the Internal Revenue Service reminds taxpayers to protect their personal and financial information throughout the year and watch out for IRS impersonation scams, along with other schemes, that try to trick people out of their hard-earned money.</p>
<p>These schemes can involve text message scams, e-mail schemes and phone scams. This tax season, the IRS also warns people to watch out for signs of potential unemployment fraud.</p>
<p>“With filing season underway, this is a prime period for identity thieves to hit people with realistic-looking emails and texts about their tax returns and refunds,” said IRS Commissioner Chuck Rettig. “Watching out for these common scams can keep people from becoming victims of identity theft and protect their sensitive personal information that can be used to file tax returns and steal refunds.”<br />The IRS, state tax agencies and the nation’s tax industry – working together in the <a href="https://www.irs.gov/newsroom/security-summit" target="_blank" rel="noopener"><em>Security Summit initiative</em></a> – have taken numerous steps since 2015 to protect taxpayers, businesses and the tax system from identity thieves. Summit partners continue to warn people to watch out for common scams and schemes this tax season.</p>
<p>&nbsp;</p>
<h3>Text message scams</h3>
<p>Last year, there was an uptick in text messages that impersonated the IRS. These scams are sent to taxpayers’ smartphones and have referenced COVID-19 and/or “stimulus payments.” These messages often contain bogus links claiming to be IRS websites or other online tools. Other than IRS Secure Access, the IRS does not use text messages to discuss personal tax issues, such as those involving bills or refunds. The IRS also will not send taxpayers messages via social media platforms.</p>
<p>If a taxpayer receives an unsolicited SMS/text that appears to be from either the IRS or a program closely linked to the IRS, the taxpayer should take a screenshot of the text message and include the screenshot in an email to <a href="mailto:phishing@irs.gov"><em>phishing@irs.gov</em></a> with the following information:</p>
<ul>
<li>Date/time/time zone they received the text message</li>
<li>Phone number that received the text message</li>
</ul>
<p>The IRS reminds everyone NOT to click links or open attachments in unsolicited, suspicious or unexpected text messages – whether from the IRS, state tax agencies or others in the tax community.</p>
<p>&nbsp;</p>
<h3>Unemployment fraud</h3>
<p>As a new tax season begins, the IRS reminds workers to watch out for claims of unemployment or other benefit payments for which they never applied. States have experienced a surge in fraudulent unemployment claims filed by organized crime rings using stolen identities. Criminals are using these stolen identities to fraudulently collect benefits.</p>
<p>Because unemployment benefits are taxable income, states issue Form 1099-G, Certain Government Payments, to recipients and to the IRS to report the amount of taxable compensation received and any withholding. Any worker receiving a fraudulent or inaccurate 1099-G should report it to the issuing state agency and request a corrected Form 1099-G.</p>
<p>For details on how to report fraud to state workforce agencies, how to obtain a corrected Form 1099-G, how to find a list of state contacts and other steps to take related to unemployment fraud, taxpayers can visit the U.S. Department of Labor’s <em><a href="https://www.dol.gov/agencies/eta/UIIDtheft" target="_blank" rel="noopener">DOL.gov/fraud page</a></em>.</p>
<p>Individuals may be victims of unemployment identity theft if they received:</p>
<ul>
<li>Mail from a government agency about an unemployment claim or payment for which they did not file. This includes unexpected payments or debit cards and could be from any state.</li>
<li>An IRS Form 1099-G reflecting unemployment benefits they weren&#8217;t expecting or didn’t receive. Box 1 on this form may show unemployment benefits they did not receive or an amount that exceeds their records for benefits they did receive. The form itself may be from a state in which they did not file for benefits.</li>
</ul>
<p>A notice from their employer indicating the employer received a request for information about an unemployment claim.</p>
<p>&nbsp;</p>
<h3>Email phishing scams</h3>
<p>The IRS does not initiate contact with taxpayers by email to request personal or financial information. The IRS initiates most contacts through regular mail delivered by the United States Postal Service.</p>
<p>If a taxpayer receives an unsolicited email that appears to be from either the IRS or a program closely linked to the IRS that is fraudulent, report it by sending it as an attachment to <em><a href="mailto:phishing@irs.gov">phishing@irs.gov</a></em>. The <em><a href="https://www.irs.gov/privacy-disclosure/report-phishing" target="_blank" rel="noopener">Report Phishing and Online Scams page</a></em> at IRS.gov provides complete details.</p>
<p>There are special circumstances when the IRS will call or come to a home or business. These visits include times when a taxpayer has an overdue tax bill, a delinquent tax return or a delinquent employment tax payment. The IRS may also visit if it needs to tour a business as part of a civil investigation (such as an audit or collection case) or during a criminal investigation. The IRS provides specific guidance on <em><a href="https://www.irs.gov/newsroom/how-to-know-its-really-the-irs-calling-or-knocking-on-your-door">how to know it’s really the IRS knocking on your door</a></em>.</p>
<h3>Phone scams</h3>
<p>The IRS does not leave pre-recorded, urgent or threatening messages. In many variations of the phone scam, victims are told if they do not call back, a warrant will be issued for their arrest. Other verbal threats include law-enforcement agency intervention, deportation or revocation of licenses.<br />Criminals can fake or “spoof” caller ID numbers to appear to be anywhere in the country, including from an IRS office. This prevents taxpayers from being able to verify the true call number. Fraudsters also have spoofed local sheriff’s offices, state departments of motor vehicles, federal agencies and others to convince taxpayers the call is legitimate.</p>
<p>The IRS (and its authorized private collection agencies) will never:</p>
<ul>
<li>Call to demand immediate payment using a specific payment method such as a prepaid debit card, gift card or wire transfer. The IRS does not use these methods for tax payments.</li>
<li>Threaten to immediately bring in local police or other law-enforcement groups to have the taxpayer arrested for not paying.</li>
<li>Demand that taxes be paid without giving the taxpayer the opportunity to question or appeal the amount owed.</li>
<li>Ask for credit or debit card numbers over the phone.</li>
</ul>
<p>Generally, the IRS will first mail a bill to any taxpayer who owes taxes. All tax payments should only be made payable to the U.S. Treasury and <strong>checks should never be made payable to third parties</strong>.</p>
<p>For anyone who doesn’t owe taxes and has no reason to think they do:</p>
<p>Do not give out any information. Hang up immediately.</p>
<p>Contact the Treasury Inspector General for Tax Administration to report the call at <a href="https://www.treasury.gov/tigta/reportcrime_misconduct.shtml" target="_blank" rel="noopener"><em>IRS Impersonation Scam Reporting</em></a>.</p>
<p>Report the caller ID and/or callback number to the IRS by sending it to <a href="mailto:phishing@irs.gov"><em>phishing@irs.gov</em></a> (Subject: IRS Phone Scam).</p>
<p><a href="https://reportfraud.ftc.gov/#/" target="_blank" rel="noopener"><em>Report it to the Federal Trade Commission on FTC.gov</em></a>. Add &#8220;IRS Telephone Scam&#8221; in the notes.</p>
<p>For anyone who owes tax or thinks they do:<br /><a href="https://www.irs.gov/payments/your-online-account" target="_blank" rel="noopener"><em>View tax account information online at IRS.gov</em></a> to see the actual amount owed. Taxpayers can also review their payment options.</p>
<ul>
<li>Call the number on the billing notice or</li>
<li>Call the IRS at 800-829-1040. IRS employees can help.</li>
</ul>
<h3></h3>
<h3>Help for victims of ID theft</h3>
<p>Unfortunately, scams and schemes can often lead to identity theft. While identity theft can have many consequences, the IRS focuses on tax-related identity theft.</p>
<p>Tax-related identity theft occurs when someone uses an individual’s stolen Social Security number (SSN) to file a tax return claiming a fraudulent refund. Taxpayers may be unaware of this activity until they e-file a tax return and discover that a return has already been filed using their SSN. Or, the IRS may send them a letter saying it has identified a suspicious return using their SSN.</p>
<p>If a taxpayer learns their SSN has been compromised, or they know or suspect they are a victim of tax-related identity theft, the IRS recommends these additional steps:</p>
<ul>
<li>Individuals should respond immediately to any IRS notice; call the number provided.</li>
</ul>
<p>Taxpayers should complete <a href="https://www.irs.gov/pub/irs-pdf/f14039.pdf"><em>IRS Form 14039, Identity Theft Affidavit (.pdf)</em></a>, if an e-file tax return rejects because of a duplicate filing under their SSN or they are instructed to do so by the IRS. Individuals can use a fillable form at IRS.gov, then print and attach the form to their paper return and mail according to instructions.</p>
<ul>
<li>Victims of tax-related identity theft should continue to pay their taxes and file their tax return, even if they must do so by paper.</li>
<li>Taxpayers who previously contacted the IRS about tax-related identity theft and did not have a resolution should call for specialized assistance at 1-800-908-4490.</li>
</ul>
<p>More information is available at: <a href="https://www.irs.gov/identity-theft-central" target="_blank" rel="noopener"><em>IRS.gov/identitytheft</em></a> or the Federal Trade Commission’s <a href="https://www.identitytheft.gov/#/" target="_blank" rel="noopener"><em>identitytheft.gov</em></a>.</p>
<p>The official IRS website is IRS.gov. People should be aware of imitation websites ending in .com. This applies to other IRS tools, too, like <a href="https://www.irs.gov/filing/free-file-do-your-federal-taxes-for-free" target="_blank" rel="noopener"><em>Free File</em></a> — they all end in .gov.</p>
<p>For more information, visit<a href="https://www.irs.gov/newsroom/tax-scams-consumer-alerts" target="_blank" rel="noopener"><em> Tax Scams and Consumer Alerts</em></a> on IRS.gov. Additional information about tax scams is available on <a href="https://www.irs.gov/newsroom/irs-social-media" target="_blank" rel="noopener"><em>IRS social media sites</em></a>, including YouTube videos.</p>
<p>&nbsp;</p>
<h3>More information:</h3>
<h4><em><a href="https://www.irs.gov/taxpayer-bill-of-rights" target="_blank" rel="noopener">Taxpayer Bill of Rights</a></em></h4>
<p><em><strong>Tax Time Guide: American Rescue Plan changes can boost refunds for many families; people should file even if they haven’t for years</strong></em></p>
<p>In IRS Release 2022-29, dated February 8, 2022, The IRS provided this information on refunds:</p>
<p>The Internal Revenue Service today urged Americans to file a 2021 federal income tax return so they can take advantage of key tax benefits included in the American Rescue Plan and other recent legislation.</p>
<p>Often, individuals and families <a href="https://www.irs.gov/help/ita/does-my-childdependent-qualify-for-the-child-tax-credit-or-the-credit-for-other-dependents" target="_blank" rel="noopener"><em>can get these expanded tax benefits</em></a>, even if they have little or no income from a job, business or other source. This means that many people who don’t normally need to file a return should consider doing so this year. Because claiming these benefits could result in tax refunds for many people, individuals should <a href="https://www.irs.gov/filing/e-file-options" target="_blank" rel="noopener"><em>file an accurate return electronically</em></a> and choose <a href="https://www.irs.gov/refunds/get-your-refund-faster-tell-irs-to-direct-deposit-your-refund-to-one-two-or-three-accounts" target="_blank" rel="noopener"><em>direct deposit</em></a> to avoid processing delays and speed delivery of their refund.</p>
<p>&nbsp;</p>
<h3>Expanded tax benefits</h3>
<p>A new fact sheet, <a href="https://www.irs.gov/newsroom/irs-expanded-credits-for-families-highlight-tax-changes-for-2021-many-people-who-dont-normally-file-should-file-this-year" target="_blank" rel="noopener"><em>FS-2022-10</em></a>, available now on IRS.gov, describes many of these expanded tax benefits. But the IRS emphasized that these benefits are only available to people who file a 2021 federal income tax return. Benefits include:</p>
<p>An expanded <a href="https://www.irs.gov/credits-deductions/2021-child-tax-credit-and-advance-child-tax-credit-payments-frequently-asked-questions" target="_blank" rel="noopener"><em>Child Tax Credit</em></a>: Families can claim this credit, even if they received monthly advance payments during the last half of 2021.</p>
<p>An increased <a href="https://www.irs.gov/credits-deductions/individuals/child-and-dependent-care-credit-information" target="_blank" rel="noopener"><em>Child and Dependent Care Credit</em></a>: Families who pay for daycare so they can work or look for work can get a tax credit worth up to $4,000 for one qualifying person and $8,000 for two or more qualifying persons.</p>
<p>A more generous <a href="https://www.irs.gov/credits-deductions/individuals/earned-income-tax-credit-eitc" target="_blank" rel="noopener"><em>Earned Income Tax Credit</em></a>: The American Rescue Plan boosted the EITC for childless workers. There are also changes that can help low- and moderate-income families with children.</p>
<p>The<a href="https://www.irs.gov/newsroom/recovery-rebate-credit" target="_blank" rel="noopener"><em> Recovery Rebate Credit</em></a>: Those who missed out on last year’s third-round of Economic Impact Payments (EIP3), also known as stimulus payments, may be eligible to claim the RRC. This credit can also help eligible people whose EIP3 was less than the full amount, including those who welcomed a child in 2021. <a href="https://www.irs.gov/newsroom/expanded-tax-benefits-help-individuals-and-businesses-give-to-charity-during-2021-deductions-up-to-600-available-for-cash-donations-by-non-itemizers" target="_blank" rel="noopener"><em>A deduction for gifts to charity</em></a>: The majority of taxpayers who take the standard deduction can deduct eligible cash contributions they made during 2021. Married couples filing jointly can deduct up to $600 in cash donations and individual taxpayers can deduct up to $300 in donations. In addition, itemizers who make large cash donations often qualify to deduct the full amount in 2021.</p>
<p>See the fact sheet for more information.</p>
<p>The IRS reminds early filers that by law, the agency cannot issue EITC refunds before mid-February. The same rule applies to refunds that include the Additional Child Tax Credit (ACTC). This year, the ACTC is typically claimed by Americans abroad who did not have a main home in the United States for more than half of 2021. Normally, the mid-February restriction does not apply to the Refundable Child Tax Credit (RCTC) claimed by people who had a main home in the U.S., unless they also claim the EITC.</p>
<p>&nbsp;</p>
<h3>Helpful reminders</h3>
<p>The IRS urges everyone to make sure they have all their year-end statements in hand before filing their 2021 return. Besides all W-2s and 1099s, this includes two statements issued by the IRS &#8212; <a href="https://www.irs.gov/individuals/understanding-your-letter-6419" target="_blank" rel="noopener"><em>Letter 6419</em></a>, showing their total advance Child Tax Credit payments, and Letter 6475, showing their total EIP3 payments. Individuals can also use <a href="https://www.irs.gov/payments/your-online-account" target="_blank" rel="noopener"><em>IRS Online Account</em></a> to see the total amounts of their third round of Economic Impact Payments or advance Child Tax Credit payments. Married spouses who received joint payments will each need to sign into their own account to retrieve their separate amounts.</p>
<p>For most Americans, the <a href="https://www.irs.gov/help/ita/what-is-the-due-date-of-my-federal-tax-return-or-am-i-eligible-to-request-an-extension" target="_blank" rel="noopener"><em>tax-filing deadline</em></a> is April 18, 2022. For residents of Maine and Massachusetts, the deadline is April 19, 2022. For Americans who live and work abroad, it’s June 15, 2022. Anyone who needs more time to file can get an <a href="https://www.irs.gov/forms-pubs/extension-of-time-to-file-your-tax-return" target="_blank" rel="noopener"><em>automatic extension</em></a> until Oct. 17, 2022.</p>
<p>Taxpayers can find answers to questions, forms and instructions and easy-to-use tools online at IRS.gov. They can use these resources to get help when it’s needed at home, at work or on the go.</p>
<p>This news release is part of a series called the <a href="https://www.irs.gov/newsroom/tax-time-guide" target="_blank" rel="noopener"><em>Tax Time Guide</em></a>, a resource to help taxpayers file an accurate tax return. Additional help is available in <a href="https://www.irs.gov/publications/p17" target="_blank" rel="noopener"><em>Publication 17</em></a>, Your Federal Income Tax.</p>
<p>I’ll be sure to provide additional Agency Updates in the next issue of The Statement! ##</p></div>
			</div>
			</div>
				
				
				
				
			</div>
				
				
			</div>
<p>The post <a href="https://advancedbenefitconsulting.com/march-2022-hipaa-privacy-security-and-other-hhs-ocr-related-federal-updates/">March 2022 HIPAA Privacy &#038; Security And Other HHS/OCR &#038; Related Federal Updates</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>HIPAA Privacy &#038; Security Updates &#8211; March, 2020</title>
		<link>https://advancedbenefitconsulting.com/hipaa-privacy-security-updates-march-2020/</link>
		
		<dc:creator><![CDATA[Orange County Benefits Expert]]></dc:creator>
		<pubDate>Wed, 04 Mar 2020 03:53:48 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[45 CFR Part 88]]></category>
		<category><![CDATA[Abortion Coverage Mandate]]></category>
		<category><![CDATA[California Department of Managed Health Care]]></category>
		<category><![CDATA[HHS]]></category>
		<category><![CDATA[sharing patient information]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=1492</guid>

					<description><![CDATA[<p>From Dorothy Cociu, COIN Editor and HIPAA Privacy &#38; Security Consultant &#38; Trainer Published in The County of Orange Insurance News,&#160;March-April, 2020 There are no HIPAA Privacy &#38; Security settlement agreements to report this issue, but I do have some important news from HHS/OCR. HHS recently announced its annual adjustments to Civil Monetary Penalties for [&#8230;]</p>
<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-updates-march-2020/">HIPAA Privacy &#038; Security Updates &#8211; March, 2020</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[
<p><strong>From Dorothy Cociu, COIN Editor and HIPAA Privacy &amp; Security Consultant &amp; Trainer</strong></p>



<p><strong>Published in The
County of Orange Insurance News,</strong><strong>&nbsp;March-April, 2020</strong></p>



<p>There are no HIPAA Privacy &amp; Security settlement
agreements to report this issue, but I do have some important news from
HHS/OCR. </p>



<p><em>HHS recently announced its annual adjustments to
Civil Monetary Penalties for HIPAA, MSP and SBC violations.&nbsp; In addition, HHS issued a Notice of Violation
to California for its Abortion Coverage Mandate, and announced a bulletin on
HIPAA Privacy &amp; The Novel Coronavirus.&nbsp;
</em></p>



<p><strong>HHS Issues Notice of Violation to
California for its Abortion Coverage Mandate</strong>.&nbsp; OCR is issuing a Notice of Violation to the state of
California, formally notifying California that it cannot impose universal
abortion coverage mandates on health insurance plans and issuers in violation
of federal conscience laws.&nbsp; California has deprived over 28,000 people of
plans that did not cover elective abortion, but now must cover abortion due to
California’s mandate. &nbsp;</p>



<p>OCR’s investigation arose from two complaints
alleging that California engaged in unlawful discrimination when California’s
Department of Managed Health Care (DMHC) ordered, in August 2014, that all
health plan issuers under its jurisdiction must offer coverage for elective
abortion in every plan they offer.&nbsp; The two complainants are the
Missionary Guadalupanas of the Holy Spirit, a Catholic order of religious
sisters, and Skyline Wesleyan Church, a non-profit Christian
church—organizations whose religious beliefs preclude them, in good conscience,
from helping to pay for insurance coverage for elective abortions.</p>



<p>Pursuant to 45 CFR Part 88 (effective March 2011),
OCR has completed the investigation of the complaints and determined that
California violated the Weldon Amendment by mandating that California health
care plan issuers cover elective abortion in each plan product, and continues
to violate federal law by continuing to require objecting health care entities
protected by the Weldon Amendment to cover elective abortion.&nbsp; With this
Notice, OCR requests that California inform OCR, within thirty days, whether
California will continue to enforce its requirement that all health plans cover
elective abortions, or whether it will agree to take corrective action and
remedy the effect of its discriminatory conduct.</p>



<p>If,
after 30 days, OCR does not receive sufficient assurance that California will
come into compliance with federal law, OCR will forward the Notice of Violation
and the evidence supporting the OCR&nbsp;
findings in this matter to the HHS funding components from which
California receives funding for appropriate action under applicable grants and
contracts regulations.&nbsp; This action may ultimately result in limitations
on continued receipt of certain HHS funds.</p>



<p>For more information, go to hhs.gov/ocr/privacy, and find notice dated
January 24, 2020. </p>



<p><strong>HHS has announced its annual adjustments of civil monetary penalties for
statutes within its jurisdiction in accordance with a 2015 law requiring annual
adjustments for inflation by January 15 of each year. </strong>The latest amounts are based on a
cost-of-living increase of 1.01764%. Here are highlights of the adjustments potentially
affecting employer-sponsored health plans:</p>



<p><strong><em>HIPAA Administrative Simplification.</em></strong>&nbsp;HIPAA administrative
simplification encompasses standards for privacy, security, breach notification
and electronic healthcare transactions. The HITECH Act substantially increased
the penalty amounts for violations of these standards, creating four categories
of violations that reflect increasing levels of culpability and establishing
minimum and maximum penalty amounts, as well as an annual cap on penalties for multiple
violations of an identical provision. The indexed penalty amounts for each
violation of a HIPAA administrative simplification provision are as follows:</p>



<p>·&nbsp;Tier 1—lack of knowledge: The minimum penalty is $119 (up from $117); the
maximum penalty is $59,522 (up from $58,490); and the calendar-year cap is
$1,785,651 (up from $1,754, 698).</p>



<p>·&nbsp;Tier 2—reasonable cause and not willful neglect: The minimum penalty is
$1,191 (up from $1,170); the maximum penalty is $59,522 (up from $58,490); and
the calendar-year cap is $1,785,651 (up from $1,754,698).</p>



<p>·&nbsp;Tier 3—willful neglect, corrected within 30 days: The minimum penalty is
$11,904 (up from $11,698); the maximum penalty is $59,522 (up from $58,490);
and the calendar-year cap is $1,785,651 (up from $1,754,698).</p>



<p>·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Tier 4—willful neglect, not
corrected within 30 days: The minimum penalty is $59,522 (up from $58,490); the
maximum penalty is $1,785,651(up from $1,754,698); and the calendar-year cap is
$1,785,651 (up from $1,754,698). [EBIA Comment: The calendar-year caps for
Tiers 1–3 do not reflect the enforcement discretion announced by HHS in April
2019, which significantly reduces the penalty caps for those tiers, perhaps
because HHS still has not formalized the enforcement discretion.]</p>



<p><strong><em>HIPAA Privacy &amp; Novel Coronavirus</em></strong></p>



<p>On February 3, 2020, HHS released a bulletin on the Coronavirus outbreak
and how HIPAA relates in such circumstances.</p>



<p>In light of the Novel Coronavirus (2019-nCoV) outbreak, the Office for
Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) is
providing this bulletin to ensure that HIPAA covered entities and their
business associates are aware of the ways that patient information may be
shared under the HIPAA Privacy Rule in an outbreak of infectious disease or
other emergency situation, and to serve as a reminder that the protections of
the Privacy Rule are not set aside during an emergency.</p>



<p>&nbsp;The HIPAA Privacy Rule protects the privacy
of patients’ health information (protected health information) but is
balanced to ensure that appropriate uses and
disclosures of the information still may be made when
necessary to treat a patient, to protect the nation’s
public health, and for
other critical purposes.</p>



<p>&nbsp;The U.S. Centers for Disease Control and Prevention
(CDC) has advised: if you were in China within the past 14 days and feel sick
with fever, cough, or difficulty breathing, you should get medical care. Call
the office of your health care provider before you go and tell them about your
travel and your symptoms. They will give you instructions on how to get care
without exposing other people to your illness. While sick, avoid contact with
people, don’t go out and delay any travel to reduce the possibility of
spreading illness to others. More information from the CDC available at: <a href="https://www.cdc.gov/coronavirus/2019-ncov/downloads/2019-ncov-factsheet.pdf">https://www.cdc.gov/coronavirus/2019-ncov/downloads/2019-ncov-factsheet.pdf</a>.</p>



<p><strong>Sharing Patient Information</strong></p>



<p><strong>&nbsp;</strong><strong><em>Treatment</em></strong><strong><em> &nbsp;</em></strong>Under the Privacy Rule, covered entities may
disclose, without
a patient’s authorization, protected health
information about the patient
as necessary to treat the patient
or to treat a different
patient. Treatment includes
the
coordination or management of health
care and related services by one or more health
care providers and others, consultation
between providers, and the referral
of patients for treatment. See 45 CFR §§ 164.502(a)(1)(ii), 164.506(c), and
the definition of “treatment” at 164.501.</p>



<p><strong><em>Public</em></strong><strong><em> Health
Activities &nbsp;</em></strong>The HIPAA Privacy Rule recognizes the legitimate need for public
health authorities and
others responsible for
ensuring public health
and safety to have access to protected health information that is
necessary to carry out their public
health mission. Therefore,
the
Privacy Rule permits covered entities to
disclose needed protected health information without individual authorization:</p>



<p><strong><em>To a
public health authority</em></strong>, such as the CDC or
a state or local health
department, that is authorized
by law to collect or receive
such information for the purpose of preventing or controlling disease, injury or disability. This would
include, for example, the reporting of disease
or injury; reporting
vital events, such
as births or deaths;
and conducting public health surveillance,
investigations, or
interventions. A “public health authority” is
an agency or authority of the United States government, a State, a territory,
a political
subdivision of a State or
territory, or Indian tribe that is responsible for
public health matters as
part of its official
mandate, as well as a person or entity acting under a grant of authority
from, or under a
contract with,
a public health agency. See 45 CFR §§ 164.501 and 164.512(b)(1)(i).&nbsp;
For example, a covered entity may
disclose to the CDC protected
health information on an ongoing basis as
needed to report all prior
and prospective cases
of patients exposed
to or suspected or confirmed
to have Novel Coronavirus (2019-nCoV).</p>



<p><strong><em>At the direction
of a public health authority, to a foreign government agency </em></strong>that is acting in
collaboration with the public
health authority. See 45 CFR
164.512(b)(1)(i).</p>



<p><strong><em>To persons at risk
</em></strong>of contracting or spreading
a disease or
condition if other law, such
as state law,
authorizes the covered
entity to notify such persons as necessary to prevent or control the
spread of the disease or otherwise to
carry out public health
interventions or investigations. See 45 CFR 164.512(b)(1)(iv).</p>



<p>&nbsp;Disclosures to
Family, Friends, and Others Involved in an Individual’s Care and for
Notification &nbsp;A covered entity may share protected health information with
a patient’s family members, relatives, friends, or other persons identified by
the patient as involved in the patient’s care.&nbsp; A covered entity also may
share information about a patient as necessary to identify, locate, and notify
family members, guardians, or anyone else responsible for the patient’s care,
of the patient’s location, general condition, or death. This may include, where
necessary to notify family members and others, the police, the press, or the
public at large.&nbsp; See 45 CFR 164.510(b).</p>



<p>The covered entity should
get verbal permission from individuals or otherwise be able to reasonably infer
that the patient does not object, when possible; if the individual is
incapacitated or not available, covered entities may share information for
these purposes if, in their professional judgment, doing so is in the patient’s
best interest.</p>



<p>In addition, a covered
entity may share protected health information with disaster relief
organizations that, like the American Red Cross, are authorized by law or by
their charters to assist in disaster relief efforts, for the purpose of
coordinating the notification of family members or other persons involved in
the patient’s care, of the patient’s location, general condition, or
death.&nbsp; It is unnecessary to obtain a patient’s permission to share the
information in this situation if doing so would interfere with the
organization’s ability to respond to the emergency.</p>



<p><strong><em>Disclosures to Prevent a Serious and Imminent Threat</em></strong><strong><em>&nbsp; </em></strong>Health care providers may share patient information
with anyone as necessary to
prevent or lessen a serious and
imminent threat to the health and safety of a person
or the public –
consistent with
applicable law (such as
state statutes, regulations,
or case law) and the
provider’s standards
of ethical conduct. See 45 CFR 164.512(j).&nbsp;
Thus, providers may disclose a patient’s health information to anyone who is in
a position to prevent or lesson the serious and imminent threat, including
family, friends, caregivers, and law enforcement without a patient’s
permission. HIPAA expressly defers to the professional judgment of health
professionals in making determinations about the nature and severity of the
threat to health and safety.&nbsp; See 45 CFR 164.512(j).</p>



<p>&nbsp;<strong><em>Minimum</em></strong><strong><em> Necessary
&nbsp;</em></strong>For most disclosures, a covered entity must make reasonable efforts to
limit the information disclosed to that which
is the “minimum necessary” to accomplish
the purpose. (Minimum
necessary requirements
do
not apply to disclosures to health care providers
for
treatment purposes.) Covered entities may rely on representations from a
public health authority or other public
official that the requested
information is the minimum necessary for
the
purpose, when that reliance is
reasonable under the circumstances. For example,
a covered entity may
rely on representations from the CDC that the protected
health information requested by the CDC about all
patients exposed to or
suspected or confirmed to have Novel Coronavirus (2019-nCoV) is the minimum
necessary for the public health purpose.&nbsp; In addition, internally,
covered entities should continue to apply their role-based access policies to
limit access to protected health information to only those workforce members
who need it to carry out their duties. See 45 CFR §§ 164.502(b), 164.514(d).</p>



<h2 class="wp-block-heading">Safeguarding Patient Information</h2>



<p>In
an emergency situation, covered entities must continue to implement reasonable safeguards
to
protect patient information
against intentional or unintentional impermissible uses and disclosures. Further, covered
entities (and
their business associates) must apply the administrative, physical, and technical
safeguards of the HIPAA
Security Rule to
electronic protected health information.</p>



<p><strong>HIPAA</strong><strong> </strong><strong>Applies</strong><strong> </strong><strong>Only </strong><strong>to</strong><strong> Covered</strong><strong> </strong><strong>Entities</strong><strong> </strong><strong>and Business</strong><strong> </strong><strong>Associates</strong><strong> </strong></p>



<p>&nbsp;The HIPAA Privacy Rule applies to disclosures made by
employees, volunteers, and other members
of a covered entity’s or business associate’s workforce. Covered
entities are health plans,
health care clearinghouses, and those
health care providers
that conduct one or more covered
health care transactions electronically, such as transmitting
health care claims to a health plan. Business associates generally are persons
or entities (other than members of the workforce
of a covered entity)
that perform functions
or activities on behalf of, or
provide certain services to, a covered entity that involve
creating, receiving, maintaining, or transmitting protected health information.
For more information on HIPAA and Public Health, please visit: &nbsp;</p>



<p><a href="https://www.hhs.gov/hipaa/for-professionals/special-topics/public-health/index.html">https://www.hhs.gov/hipaa/for-professionals/special-topics/public-health/index.html</a></p>



<p>##</p>
<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-updates-march-2020/">HIPAA Privacy &#038; Security Updates &#8211; March, 2020</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>HIPAA Privacy &#038; Security Updates &#8211; January 2020</title>
		<link>https://advancedbenefitconsulting.com/hipaa-privacy-security-updates-january-2020/</link>
		
		<dc:creator><![CDATA[Orange County Benefits Expert]]></dc:creator>
		<pubDate>Thu, 09 Jan 2020 22:40:00 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[COIN (County of Orange Insurance News)]]></category>
		<category><![CDATA[HIPAA Privacy & Security Updates]]></category>
		<category><![CDATA[$3 million penalty]]></category>
		<category><![CDATA[cyber security]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[data encryption]]></category>
		<category><![CDATA[FBI]]></category>
		<category><![CDATA[HIPAA Privacy & Security]]></category>
		<category><![CDATA[ransomeware]]></category>
		<category><![CDATA[Texas Health and Human Services commission]]></category>
		<guid isPermaLink="false">https://advancedbenefitconsulting.com/?p=1495</guid>

					<description><![CDATA[<p>From Dorothy Cociu, COIN Editor and HIPAA Privacy &#38; Security Consultant &#38; TrainerPublished: The County of Orange Insurance News, January-February, 2020 There have been several OCR enforcement activities since the last issue of the COIN., and some helpful information was released from the Fall, 2019 Cybersecurity Newsletter that are helpful that I will share.&#160; Enforcement [&#8230;]</p>
<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-updates-january-2020/">HIPAA Privacy &#038; Security Updates &#8211; January 2020</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[
<p><strong><em>From Dorothy Cociu, COIN Editor and HIPAA Privacy &amp; Security Consultant &amp; Trainer<br>Published:  The County of Orange Insurance News,  January-February, 2020</em></strong></p>



<p>There have been several OCR enforcement activities
since the last issue of the COIN., and some helpful information was released
from the Fall, 2019 Cybersecurity Newsletter that are helpful that I will
share.&nbsp; </p>



<h2 class="wp-block-heading">Enforcement Activities</h2>



<p>On
the enforcement side, the first settlement was regarding a failure to encrypt
mobile devices, which led to a $3 Million HIPAA settlement.&nbsp;&nbsp; <strong></strong></p>



<p>1)
Reported on November 5, 2019, <strong>The University of Rochester Medical Center (URMC) has agreed to pay $3
million to the Office for Civil Rights (OCR) at the U.S. Department of Health
and Human Services (HHS), and take substantial corrective action to settle
potential violations of the Health Insurance Portability and Accountability Act
(HIPAA) Privacy and Security Rules.</strong>
URMC includes healthcare components such as the School of Medicine and
Dentistry and Strong Memorial Hospital. URMC is one of the largest health
systems in New York State with over 26,000 employees.</p>



<p>URMC
filed breach reports with OCR in 2013 and 2017 following its discovery that
protected health information (PHI) had been impermissibly disclosed through the
loss of an unencrypted flash drive and theft of an unencrypted laptop,
respectively. OCR&#8217;s investigation revealed that URMC failed to conduct an
enterprise-wide risk analysis; implement security measures sufficient to reduce
risks and vulnerabilities to a reasonable and appropriate level; utilize device
and media controls; and employ a mechanism to encrypt and decrypt electronic
protected health information (ePHI) when it was reasonable and appropriate to
do so. Of note, in 2010, OCR investigated URMC concerning a similar breach
involving a lost unencrypted flash drive and provided technical assistance to
URMC. Despite the previous OCR investigation, and URMC&#8217;s own identification of
a lack of encryption as a high risk to ePHI, URMC permitted the continued use
of unencrypted mobile devices.</p>



<p>&#8220;Because
theft and loss are constant threats, failing to encrypt mobile devices
needlessly puts patient health information at risk,&#8221; said Roger Severino,
OCR Director. &#8220;When covered entities are warned of their deficiencies, but
fail to fix the problem, they will be held fully responsible for their
neglect.&#8221;</p>



<p>In addition to the monetary settlement, URMC will
undertake a corrective action plan that includes two years of monitoring their
compliance with the HIPAA Rules.</p>



<p>2)
On November 7, 2019, OCR reported that The Office for Civil Rights (OCR) at the
U.S. Department of Health and Human Services (HHS) has imposed a <strong>$1,600,000 civil money penalty against
the Texas Health and Human Services Commission </strong>(TX HHSC), for violations of the Health Insurance
Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules
between 2013 and 2017. TX HHSC is part of the Texas HHS system, which operates
state supported living centers; provides mental health and substance use
services; regulates child care and nursing facilities; and administers hundreds
of programs for people who need assistance, including supplemental nutrition
benefits and Medicaid. The Department of Aging and Disability Services (DADS),
a state agency that administered long-term care services for people who are
aging, and for people with intellectual and physical disabilities, was
reorganized into TX HHSC in September 2017.</p>



<p>On
June 11, 2015, DADS filed a breach report with OCR stating that the electronic
protected health information (ePHI) of 6,617 individuals was viewable over the
internet, including names, addresses, social security numbers, and treatment
information. The breach occurred when an internal application was moved from a
private, secure server to a public server and a flaw in the software code
allowed access to ePHI without access credentials. OCR&#8217;s investigation
determined that, in addition to the impermissible disclosure, DADS failed to
conduct an enterprise-wide risk analysis, and implement access and audit
controls on its information systems and applications as required by the HIPAA
Security Rule. Because of inadequate audit controls, DADS was unable to determine
how many unauthorized persons accessed individuals&#8217; ePHI.</p>



<p>3)On
November 27, 2019, the Office for Civil Rights (OCR) at the U.S Department of
Health and Human Services (HHS), reported that they and <strong>Sentara Hospitals (Sentara) have
agreed to take corrective actions and pay $2.175 million to settle potential
violations of the Health Insurance Portability and Accountability Act (HIPAA)
Breach Notification and Privacy Rules.&nbsp; </strong>Sentara is comprised of 12 acute care hospitals with more than 300 sites
of care throughout Virginia and North Carolina.</p>



<p>In
April of 2017, HHS received a complaint alleging that Sentara had sent a bill
to an individual containing another patient’s protected health information
(PHI). OCR’s investigation determined that Sentara mailed 577 patients’ PHI to
wrong addresses that included patient names, account numbers, and dates of
services.&nbsp; Sentara reported this incident as a breach affecting 8
individuals, because Sentara concluded, incorrectly, that unless the disclosure
included patient diagnosis, treatment information or other medical information,
no reportable breach of PHI had occurred.&nbsp; Sentara persisted in its
refusal to properly report the breach even after being explicitly advised of
their duty to do so by OCR. OCR also determined that Sentara failed to have a
business associate agreement in place with Sentara Healthcare, an entity that
performed business associate services for Sentara.</p>



<p>“HIPAA
compliance depends on accurate and timely self-reporting of breaches because
patients and the public have a right to know when sensitive information has
been exposed.” said Roger Severino, OCR Director.&nbsp; “When health care
providers blatantly fail to report breaches as required by law, they should
expect vigorous enforcement action by OCR.” </p>



<p>In addition to the monetary settlement, Sentara will
undertake a corrective action plan that includes two years of monitoring.</p>



<h2 class="wp-block-heading"> Cybersecurity Update</h2>



<p>On December 2, 2019, OCR released it’s Cybersecurity
Newsletter, which is designed to help prevent, mitigate and recover from
ransomware attacks by providing insight into new developments and trends and
how organizations can improve their security posture in response to this
threat.&nbsp; I will summarize some of the
information provided: </p>



<p>Ransomware attacks have involved mass,
indiscriminate infection of as many devices across as many systems as
possible.&nbsp; They often spread
automatically through dedicated connections between networks and spam phishing
emails.&nbsp; </p>



<p>The FBI reports that ransomware infects more than
100,000 computers a day around the world and ransomware payments approach $1
Billion annually, and those numbers are expected to rise.&nbsp; The ransom payments, however, do not account
for all of the costs associated with a ransomware attack.&nbsp; Unrecoverable data, lost productivity, damage
to reputation, damaged equipment, forensic investigations, remediation
expenses, and legal bills are some of the additional costs that can be expected
when responding to a ransomware attack. </p>



<p>In response to this new cyberthreat, organizations and governments began adapting.  Anti-malware vendors updated their products to help customers identify, prevent and contain infections.  Cybersecurity researchers and scientists studied ransomware code and, in some cases, were able to reverse-engineer decryption keys to help ransomware victims recover data without paying the ransom.  Organizations prioritized incident response and data backups in order to mitigate the damage caused.  However, as organizations adapt, so do ransomware developers&#8230; Stay tuned for more HIPAA Privacy &amp; Security updates in the next issue of the COIN!  ##   </p>
<p>The post <a href="https://advancedbenefitconsulting.com/hipaa-privacy-security-updates-january-2020/">HIPAA Privacy &#038; Security Updates &#8211; January 2020</a> appeared first on <a href="https://advancedbenefitconsulting.com">Advanced Benefit Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
	</channel>
</rss>
