Welcome to the first post in our three-part HIPAA Breach series! Our healthcare and business law firm often works with medical practices to determine whether an act involving patient privacy constitutes a violation of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) requiring notification and reporting of any breach. By law, a patient’s health information can only be used and disclosed for specific reasons. When there is a risk that patient information has been accessed, used, or disclosed in a way that is not permitted, there may be a HIPAA violation. More information about the HIPAA rules can be found on our website here and the U.S. Department of Health and Human Services’ (HHS) website here. There are generally three initial steps a practice takes in the face of a potential HIPAA breach. First, performing a risk assessment to determine whether a breach, in fact, occurred. Second, if the risk assessment reveals a probability that personal health information (PHI) was likely compromised, then the patients involved must be notified. Third, the breach must be reported to HHS’s Office of Civil Rights (OCR).
This post is the first of a three-part series on HIPAA breaches. This post explains the first step—conducting the risk assessment. Future posts will discuss the second and third steps required if the risk assessment reveals a breach occurred. Note, this post and series do not address state privacy laws or attendant state notification or reporting requirements upon a breach. If you have questions regarding this blog post, conducting a HIPAA risk analysis, your reporting and notification requirements under HIPAA, or other privacy-related matters, you may contact us at (404) 685-1662 (Atlanta) or (706) 722-7886 (Augusta), or by email, info@littlehealthlaw.com. You may also learn more about our law firm by visiting www.littlehealthlaw.com.
Little Health Law Blog


As a healthcare and business law firm, we work with many physicians employed
Our healthcare and business law firm frequently receives questions asking about telemedicine rules in Georgia. This post intends to outline some relevant Georgia rules and regulations relating to telemedicine. Our next post will consider the rules around prescribing based on a telemedicine consult and how COVID-19’s Public Health Emergency impacts those rules. If you have questions about
All individuals and industries have been impacted by COVID-19. As relevant to most of our clients, the medical industry has been heavily impacted. In June 2021, the Physicians Advocacy Institute (“PAI”) released the results of a study entitled: “
In our previous post reviewing the Georgia Composite Medical Board’s (“Medical Board” or “GCMB”)
Welcome to the second installment of our business and healthcare law firm’s monthly medical board meeting review, focusing on the Georgia Composite Medical Board (“Medical Board” or “GCMB”). As a healthcare law firm with physician clients, it is our duty to stay up to date with the Medical Board’s positions and changes so as to better inform our clients. If you have
Our healthcare and business law firm consistently works with physicians who are dealing with complications resulting from adverse reporting to the National Practitioner Data Bank (“NPDB”). Certain entities, including
Welcome to the first installment of our business and healthcare law firm’s monthly medical board meeting review, focusing on the Georgia Composite Medical Board (“GCMB” or “Medical Board”). As a healthcare law firm with many physician clients, it is our duty to stay up to date with the Medical Board’s positions and changes so as to better inform our clients. We hope that by providing a review of the Medical Board’s monthly meeting minutes, our readers and provider clients will be able to better navigate the Medical Board successfully. If you have
outlining the mission and purpose of the business, the next step for our
useful when managed correctly, these clinics are widely thought to be part of the cause for the opioid epidemic. Georgia citizens suffered and continue to suffer from the opioid epidemic, but, in 2013, Georgia took a large step toward reducing the drug problem by enacting House Bill 178 (“HB 178”) known as the Georgia Pain Management Clinic Act. Before any of our clients become involved with a pain management clinic in Georgia, we immediately advise them of the following three facts.