Read TMA HIPAA Articles
Start now and gain the knowledge needed to understand HIPAA rules and regulations. View all of the HIPAA courses available on the TMA Education Center.
Use these resources to learn more about HIPAA privacy and security compliance.
Physician's Breach Notification Requirements
Education: View TMA's educational programs on HIPAA privacy and security compliance.
E-tips: TMA offers physicians (general information) advice on issues related to HIPAA compliance.
HIPAA Security Risk Assessment Tool Use this free tool created by the Office of the National Coordinator (ONC)
Free HHS Cybersecurity TrainingThe free platform released by the U.S. Department of Health and Human Services helps physicians and others working in health care protect against top electronic threats, such as ransomware and data loss. Each training contains videos and other easy-to-reference tools.
TMA Ransomware and Cybersecurity Resource Center
TMA's Practice Services Compliance Toolkits Make sure your practice is compliant with help from TMA’s compliance toolkits.
Ransomware and HIPAA Fact Sheet - HHS
Are You Prepared for a Business Associate Breach? - TMA whitepaper, Aug. 2015
Are You Prepared for a Computer Virus Incident? - TMA whitepaper, Aug. 2015
Are You Prepared for a Lost Laptop or Smartphone? - TMA whitepaper, Aug. 2015
Download a sample Business Associates Agreement.
Download a sample of Notice of Privacy Practices
Download a Sample Authorization Form to use or disclose protected health information
HIPAA Privacy in Emergency Situations - OCR
HIPAA in Emergency Situations: Preparedness, Planning, and Response - OCR
The Security Risk Assessment Tool by the Office of the National Coordinator (ONC) for Health Information Technology is a free tool designed to help practices with one to 10 physicians identify their risks and vulnerabilities with electronic protected health information (ePHI) and then implement appropriate security measures.
HIPAA requires practices to review and document their administrative, physical, and technical safeguards to regularly protect patients’ ePHI.
Also, if you participate in the Medicare Merit-Based Incentive Payment System (MIPS), conducting or updating a risk assessment is a requirement in the Promoting Interoperability category.
Patient Privacy: A Guide for Providers - This HHS resource (login required), is an educational program for health care providers on compliance with various aspects of the HIPAA Privacy and Security Rules. Physicians can earn free CME credits and health care professionals will receive CE credits.
Complexity of HIPAA Enforcement – Workgroup for Electronic Data Interchange (WEDI)
Omnibus Final Rule – Section by Section Comparative Summary (WEDI)
Got HIPAA questions? Call the Knowledge Center.
Electronic health record (EHR) vendors may not block or terminate your access to your patient’s information. This paper will help arm you with information about your rights.