Posts tagged with ""
An osteoporosis medication pathway routes PHI through imaging centers, labs, pharmacies, benefit verification services, and reminder tools. Here is how to map every third-party data flow and decide which ones require a signed BAA.
Carl B. Johnson
A HEART score encounter leaves fragments in six systems and three organizations. Here is how to set the retention clock, track every copy, and destroy them defensibly when the clock runs out.
Carl B. Johnson
One short dermatology visit can push protected health information through eight or more organizations before the claim clears. Here is the administrative map — coding, images, vendors, BAAs, and the records requests that follow.
Carl B. Johnson
A referral that includes lipase levels moves PHI between two organizations in under an hour. Here's the disclosure authority, the vendor layer, the release timing, and the failure modes your referral log should catch.
Carl B. Johnson
One telehealth follow-up for an abnormal liver panel can touch six vendors and three organizations in two weeks. Here is the intake, consent, referral, and BAA workflow that keeps that trail defensible.
Carl B. Johnson
One yeast culture can pass through six organizations before the result lands in your chart. Here's how to map that trail, decide which vendors are business associates, and close the gaps before OCR asks.
Carl B. Johnson
A single musculoskeletal episode can generate records at four organizations. Here is how to run the request, verify the requester, price the copy, and document the file so an access complaint never reaches OCR.
Carl B. Johnson
An LPR reflux workup spreads chart data across specialists, scope capture systems, and device vendor portals. Here's how to define the designated record set, meet the access clock, and get the BAAs in place before a request lands.
Carl B. Johnson
Sign-in sheets, waiting-room callbacks, and check-in tablets create disclosure risk long before a patient reaches an exam room. A practical front-desk privacy walkthrough for gynecology and women's health practices.
Carl B. Johnson
Records from an SA node evaluation live in more places than your EHR. Here's how to build a retention schedule, assign the clocks, and destroy media in a way you can defend three years later.
Carl B. Johnson