Posts tagged with ""
A practical retention and destruction policy for the paper, images, and billing files generated by a minor in-office procedure — including who signs the vendor agreement and what your destruction log must capture.
Carl B. Johnson
One immunization encounter can move identifiable data through eight or more systems before the claim pays. Here is the full administrative trail, who needs a BAA, and where practices get it wrong.
Carl B. Johnson
An ankle injury seen at urgent care can generate four inter-organization record transfers in 48 hours. Here is how to run those disclosures, channels, and vendor relationships without an authorization scramble.
Carl B. Johnson
One near-fainting workup can send protected health information to a dozen outside companies. Here is how to inventory those handoffs, decide who needs a BAA, and prepare for the day a vendor calls with bad news.
Carl B. Johnson
Latent TB encounters generate paperwork that crosses labs, imaging centers, employers, schools, and health departments. Here is the records, retention, and release workflow your staff should be running.
Carl B. Johnson
Walk-in visits for an infected ear piercing concentrate every front-desk privacy risk you have: sign-in sheets, lobby conversations, minors with two adults at the counter, and photos on someone's phone. Here's the workflow audit.
Carl B. Johnson
A single lipid panel can touch eight or nine outside organizations before the result reaches the chart. Here is how to inventory those data flows and decide which vendors require a signed Business Associate Agreement.
Carl B. Johnson
A five-minute foreign body removal generates a procedure note, a wound photo, an immunization lookup, and a billing record. Here is how to set retention clocks and destroy those records without creating a reportable breach.
Carl B. Johnson
A hepatitis C screening result rarely stays in one chart. Here is the records-sharing workflow — permitted treatment disclosures, Part 2 limits, BAA gaps, and the clocks that run in the background.
Carl B. Johnson
Minor ENT complaints drive a steady stream of self-scheduled telehealth visits. Here's the intake, consent, vendor, and referral workflow that keeps those twelve-minute encounters out of your breach log.
Carl B. Johnson