When health care organizations review their operations to see where electronic protected health information (ePHI) is being saved, transmitted, and viewed, a great deal of time is spent on the obvious candidates: email, chat, stored files and health records, etc.

Many overlook the fact that ePHI can be embedded in Contacts, Calendars, and Tasks.  Consider for example:

Read the rest of this post »

LuxSci has a new Business Associate addendum to its Master Services Agreement that covers medical privacy concerns for all clients that are subject to the HIPAA regulations. This contract addendum is automatically included by reference in the contracts for all new accounts. It is also available to any existing account that would like to have it added to its current contract.

This has been updated again for the 2010 HIPAA HITECH changes. For more information, see HIPAA HITECH Business Associate Agreement and LuxSci Account Requirements.