I heard someone say they expected people to “summer hard” this year since no one could do much of anything last summer. From what I have seen so far, those words are very true. It seems the highways are busier, the lakes are buzzing with more people, boats, and jet skis than ever before, and…
We hear a lot about culture these days. It seems every business management guru says the culture of the organization is the foundation for everything that happens. I tend to agree with that statement; without a solid culture, the organization can often function more like a ship without a rudder, or a child chasing the…
As we turn the page on what can only be described as a “one of a kind” year we have a tremendous opportunity to look back at 2020 and really evaluate how the compliance program performed, and where 2021 might provide some opportunities to improve, change direction or re-tool the program. The pandemic forced providers…
In June 2019, when the Criminal Division of the Department of Justice, (DOJ), updated its guidance document on how prosecutors are to evaluate an organization’s compliance program, (Evaluation of Corporate Compliance Programs), one theme comes through loud and clear. Compliance policies, procedures and controls should never become stale or stagnant. Rather, the DOJ takes the…
As I write this blog post I am watching the crew working on the road in front of my office. It has been a long 5 months, yes COVID has impacted us, but we have also been unable to get into our office parking lot due to a complete reconstruction of First Street where our…
Most every compliance program has a document called the Code of Conduct, Code of Ethics or some other title that indicates the organization’s “commitment” to doing the right thing. Typically the document was drafted when the compliance program was first developed, and likely has not received much attention since then. It may be printed in…
I recently wrote a newsletter article on the importance of walking through the organization with “HIPAA Goggles” on as a way to see potential HIPAA issues that may be overlooked as we go about our jobs on a daily basis. Our brains typically call to our attention things that are different or out of place;…
Providers spend a lot of time talking about how to improve the quality and timeliness of service documentation but there is another type of documentation that deserves our attention as well. Without proper and sufficient documentation it is nearly impossible to maintain an effective HIPAA program. If a provider experiences a breach that impacts more…
By now most organizations are aware that they need a compliance program and a person who is designated as the Compliance Officer, but HIPAA requires every organization to also designate a Privacy Officer and a Security Officer. In many organizations the Compliance Officer tends to wear all the hats but it is important to consider…
As we have seen in recent weeks, hackers have become very comfortable intruding in on our personal lives by exploiting the dozens of devices we have connected to the internet. There is even a podcast that hacks into in-home security cameras when the show is on the air and talks to the homeowners. I suppose…