Urology Coding Alert
Yes, There Are Ways to Access PHI Through Cloud Storage
Question: Can we access our patients' PHI through cloud storage available from our billing company? South Carolina Subscriber Answer: Yes, you can access patients' electronic protected health information (ePHI) through cloud storage, but you should be aware of the security breach risks. A new report from the HHS-OCR maintains that file-sharing collaboration has its drawbacks. Last October, the HHS-OCR offered provider guidance, focusing on the privacy and security concerns that arise when ePHI is shared through the cloud. In spite of the advice, which spoke to both the HIPAA Privacy and Security Rules pertaining to disclosures, Business Associate Agreements (BAAs), Service Level Agreements (SLAs), encryption and system requirements, a recent survey of a myriad of organizations across business spectrums suggested that many had already experienced breaches due to issues with the cloud computing technologies, suggested the latest edition of the HHS-OCR Cybersecurity Newsletter. The June issue showed that the biggest problems arose from temporary staff, "contractors, or third parties accessing data they should not see; employees accidentally exposing data; and broken security management processes." Interestingly, "only 28 percent of respondents listed external hackers as one of their top three concerns," the survey indicated. Poorly configured file-sharing systems "as well as cloud computing services, are common issues that can result in the disclosure of sensitive data, including ePHI," the Cybersecurity Newsletter noted. "Too often, access, authentication, encryption, and other security controls are either disabled or left with default settings, which can lead to unauthorized access to or disclosure of that data." Resource: To read the June 2017 HHS-OCR Cybersecurity Newsletter, visit https://www.hhs.gov/sites/default/files/june-2017-ocr-cyber-newsletter.pdf.
Related Articles
Urology Coding Alert
- Reimbursement:
Here's Your Heads-up on the Proposed 2018 Physician Fee Schedule
Focus on these 4 areas that might apply to your practice. 'Tis the season for [...] - Physician Fee Schedule:
Get the Lowdown on Proposed Shifts to 1995 and 1997 E/M Documentation Guidelines
CMS's recently released 2018 proposed Medicare Physician Fee Schedule (MPFS) has caused quite a stir [...] - You Be the Coder:
Report Multiple Codes for Urethral Diverticulectomy With Cystectomy
Question: I'm coding for a urethral diverticulectomy, cystoprostatectomy, and colon conduit urinary diversion during the same [...] - Reader Question:
Choose ICD-10 Based on Reason for Advanced Care Planning (ACP)
Question: What ICD-10 codes can I report with 99497 and +99498? I've heard that we can [...] - Reader Question:
Code and Bill 55875 for the Urologist
Question: A urology practice is doing radiation therapy for prostate cancer as an office/outpatient procedure. This [...] - Reader Question:
Code 49405 Represents Perinephric Hematoma Aspiration
Question: What are the correct CPT® and diagnosis codes for aspiration of a perinephric hematoma following [...] - Reader Question:
You Might Not Need Both Pre-and Post-Void Amounts for PVR Urine Test
Question: What documentation must be included in the office note when a PVR test is done? [...] - Reader Question:
New Form Gives Patients Access to Their PHI
Question: It seems that more patients are trying to keep up with their health histories and [...] - Reader Question:
Yes, There Are Ways to Access PHI Through Cloud Storage
Question: Can we access our patients' PHI through cloud storage available from our billing company? South [...]
