Posts tagged with ""
One yeast culture can pass through six organizations before the result lands in your chart. Here's how to map that trail, decide which vendors are business associates, and close the gaps before OCR asks.
Carl B. Johnson
Sign-in sheets, waiting-room callbacks, and check-in tablets create disclosure risk long before a patient reaches an exam room. A practical front-desk privacy walkthrough for gynecology and women's health practices.
Carl B. Johnson
A single pediatric immunization visit can push data to a dozen outside organizations. Here's how to map those flows, sort business associates from public health authorities, and close the BAA gaps before an auditor finds them.
Carl B. Johnson
Records from an SA node evaluation live in more places than your EHR. Here's how to build a retention schedule, assign the clocks, and destroy media in a way you can defend three years later.
Carl B. Johnson
A single renal colic episode generates records at six or seven organizations before the claim adjudicates. Here is the administrative map: who touches the PHI, which handoffs need a BAA, and which ones do not.
Carl B. Johnson
A practical walkthrough of the intake fields, consent documents, vendor agreements, and records routing behind a chronic-care telehealth follow-up — written for the administrator who owns the paperwork, not the prescription.
Carl B. Johnson
A single microcytic anemia workup can touch a reference lab, a GI practice, an imaging center, and three vendors. Here is the records, retention, and release workflow your staff needs to run it cleanly.
Carl B. Johnson
Sign-in sheets, lobby call-backs, and check-in tablets create real disclosure risk in a clinic that manages macrocytic anemia workups. Here is the operator's audit, with owners and a 30-day plan.
Carl B. Johnson
A hospital discharge after a myxedema coma admission sends records, spouses, and portal messages at your front desk all at once. Here is the access, messaging, and vendor policy that keeps the workflow defensible.
Carl B. Johnson
A single concussion encounter can push PHI through six or more organizations in three weeks. Here's the administrative map: claim path, minimum necessary limits, which vendors need a BAA, and which requests need an authorization instead.
Carl B. Johnson