Close Close

Recent insights

Are Non-Covered Activities And Programs At Your Campus/Institution Leaving You Overly Vulnerable to HIPAA? A “Hybrid” Designation Can Reduce Risks for HIPAA Compliance and Fines -- But be Careful to Do It Right!

Oct 15 2018
Many institutions of higher education and other complex organizations have multi-faceted operations, performing activities that both are covered under the Health Insurance Portability and Accountability Act of 1996, as modified by the Health Information Technology for Economic and Clinical Health Act (“HIPAA”) and not covered by HIPAA’s scope. If an entity performs both covered and non-covered functions, the failure to designate the business activities that constitute covered functions will cause the entire entity to be subject to the data privacy and workplace compliance requirements of HIPAA .