HIPAA, CIA, and Safeguards Case Study Example | Topics and Well Written Essays - 750 words

HIPAA, CIA, and Safeguards - Case Study Example It never took enough precautionary measures to ensure the privacy of information. Investigations also revealed that the organization never implemented enough physical safeguards. This is due to the fact that it never had proper facility access controls. In fact, the requirements are as per HIPAA security rules. It has been noticed that health plans as well as health care providers do not comply with the requirements of HIPAA as far as information security is concerned. HITECH Breach notification rule is assertive in ensuring that rights of patients are protected. The rights ensure that information about the patient is given protection to enable privacy of the service (HHS, 2012). Apart from paying $1.5 million, BCBST had to promise to review and revise its policies concerning security and privacy. The health providers and health plans do not provide robust and regular training for employees as required by HIPAA rules. It is required that confidentiality of information is maintained such that the information is not disclosed to unauthorized people. OCR has investigated issues on lack of compliance. It investigated several institutions including hospital chains, small provider offices, major medical centers, national pharmacy chains, health insurance issuers, and group health plans among others. OCR has been specific in its investigations (Gibson, 2013). Among the issues include patients lacking access to protected health information, PHI. It was found that there are no proper safeguards to PHI. The health institutions do not put implement proper administrative safeguards that are used to protect electronic the protected health information. Another issue was unauthorized disclosure or use of more than the minimum necessary protected health information. Another case happened to Hospice of North Idaho when it violated HIPAA security rule. It agreed to pay the government $50000. According to the investigations of OCR, it was found that an unencrypted