Posts tagged with ""
Surgical and GI practices that handle pneumoperitoneum findings move records fast and talk loudly. Here is where the front desk leaks PHI — and the specific controls that hold up under an OCR complaint review.
Carl B. Johnson
A low-acuity respiratory visit moves PHI through scheduling, telehealth, e-prescribing, labs, transcription, and billing in under ten minutes. Here's how to map those flows and identify every vendor that requires a signed Business Associate Agreement.
Carl B. Johnson
A telehealth visit that ends in a lab order moves protected health information through six or more organizations. Here is the consent, BAA, and records workflow an administrator actually has to own.
Carl B. Johnson
Walk-in injection visits push clinical detail onto your sign-in sheet and into your lobby. Here's how to audit the check-in workflow, apply reasonable safeguards, and document the whole thing.
Carl B. Johnson
An osteoporosis medication pathway routes PHI through imaging centers, labs, pharmacies, benefit verification services, and reminder tools. Here is how to map every third-party data flow and decide which ones require a signed BAA.
Carl B. Johnson
Follow-up for vaginal atrophy generates portal messages, refill requests, and specialist records transfers — all of which pass through non-clinical staff. Here is the messaging policy, proxy-access control, and vendor documentation that keeps that traffic defensible.
Carl B. Johnson
A HEART score encounter leaves fragments in six systems and three organizations. Here is how to set the retention clock, track every copy, and destroy them defensibly when the clock runs out.
Carl B. Johnson
One short dermatology visit can push protected health information through eight or more organizations before the claim clears. Here is the administrative map — coding, images, vendors, BAAs, and the records requests that follow.
Carl B. Johnson
A referral that includes lipase levels moves PHI between two organizations in under an hour. Here's the disclosure authority, the vendor layer, the release timing, and the failure modes your referral log should catch.
Carl B. Johnson
One telehealth follow-up for an abnormal liver panel can touch six vendors and three organizations in two weeks. Here is the intake, consent, referral, and BAA workflow that keeps that trail defensible.
Carl B. Johnson