On October 6, 2016, the Department of Health and Human Services Office for Civil Rights (“OCR”) issued guidance on complying with HIPAA privacy, security, and breach notification rules when using ...
The subsequent OCR investigation found that Lifespan failed to implement policies and procedures to encrypt all devices used for work purposes. Lifespan Health System, a Rhode Island-based healthcare ...