Remove Admissions Remove Business Associate Remove Patient Records
article thumbnail

UnitedHealth Group Confirms Data Stolen in Change Healthcare Ransomware Attack

The HIPAA Journal

The AHA explained in the letter that Change Healthcare is a covered entity and, as such, has a duty to notify OCR and the affected individuals about any data breach, even in cases where Change Healthcare acts as a business associate. pharmacies and serves 129 million patients.

HIPAA 95
article thumbnail

New HIPAA Regulations in 2022-2023

The HIPAA Journal

Individuals suffering from substance abuse disorder (SUD) must also be able to get the treatment they need during the COVID-19 pandemic, which has meant changes needed to be made to 42 CFR Confidentiality of Substance Use Disorder Patient Records (Part 2) regulations. A definition has been added for electronic health records.

HIPAA 124