Should You Deliver Patients Their PHI Via Email?

Complying with HIPAA and Delivering PHI via Email Not only “should” you deliver patients their PHI via email, but you are actually required to assuming it’s reasonable and appropriate to… Read More

Analog or eFaxing and HIPAA

We are often asked at ScanSTAT about faxing medical records.  With the changes to HIPAA Security and Privacy Rules from the HITECH Act and the many permutations and combinations of… Read More

Outsourced Records Services: Common Security Objections

When a practice or doctor’s office considers outsourcing medical records tasks (like release of information or inbound document management to a third party, they often have concerns over the security and… Read More

What is an audit? And how should an audit activity be handled in your medical practice?

A common question we hear all the time is, “Do you handle our audits?” While it might seem like a simple yes or no question, there’s more to it. The… Read More

I asked for records from Dr. Smith. Why do my files also have Dr. Jones’ records? Isn’t that a HIPAA violation?

Bottom Line In most electronic health records systems, patients have one chart that all doctors share. Because all doctors in that facility use that chart to make treatment decisions, all… Read More

What are best practices for managing mental/behavioral health records and psychotherapy notes?

Bottom Line Under HIPAA Privacy Law, there is a distinction between mental health records, which are part of a patient’s overall medical record, and psychotherapy notes, which are provided special… Read More