Posts tagged with ""
A specialty test order like genesyte pulls in couriers, portals, interface vendors, and release-of-information services. Here is how to inventory that chain, decide who needs a BAA, and manage the breach clock when a downstream vendor fails.
Carl B. Johnson
A practical workflow for handling right-of-access requests when the encounter involves cardiology co-management and nutrition counseling: designated record set scope, verification, fees, the 30-day clock, and the vendor contracts underneath it.
Carl B. Johnson
Surgical and GI practices that handle pneumoperitoneum findings move records fast and talk loudly. Here is where the front desk leaks PHI — and the specific controls that hold up under an OCR complaint review.
Carl B. Johnson
A low-acuity respiratory visit moves PHI through scheduling, telehealth, e-prescribing, labs, transcription, and billing in under ten minutes. Here's how to map those flows and identify every vendor that requires a signed Business Associate Agreement.
Carl B. Johnson
Three separate clocks run on a chest-wall-pain chart: the HIPAA six-year documentation rule, your state's medical record law, and payer contract terms. Here's how to build a retention and destruction schedule that holds up.
Carl B. Johnson
A growth-restriction referral pulls records across an OB practice, an MFM group, a hospital, a NICU, and a pediatric office in days. Here's the permitted-disclosure and vendor workflow that has to hold up.
Carl B. Johnson
A telehealth visit that ends in a lab order moves protected health information through six or more organizations. Here is the consent, BAA, and records workflow an administrator actually has to own.
Carl B. Johnson
One foot injury encounter can move protected health information through six or seven outside organizations in ten days. Here is how to tell which of them are business associates, and what your agreements need to say before the data moves.
Carl B. Johnson
A five-minute oral lesion visit can generate a portal photo, a referral letter, and a records request with a 30-day clock attached. Here's the operational workflow for handling it correctly.
Carl B. Johnson
A suspected infant botulism case generates a public health disclosure, an emergency transfer packet, a specialty program record trail, and a parent access request — usually within a week. Here is the administrative workflow that keeps all four defensible.
Carl B. Johnson