Re: medical vendors as Business Associates

2003-02-27 Thread Doug Webb
Jo, quite so. I would lkie to call an entity that would be a CE if they did a single electronic transaction that a standard has been established for a "Potential Covered Entity" (PCE) and avoid all the repeated verbiage. Any takers? The opinions expressed here are my own and not necessarily

Re: Questions in regard to Security/Privacy

2003-02-27 Thread Doug Webb
Richard, The first question is: Is what is being transmitted Protected Healthcare Information? If not all the rest is moot. If what is being transmitted is strictly the financial data (This merchant charged this person this much), it probably isn't PHI, but just money. If it is you must do

RE: Questions in regard to Security/Privacy

2003-02-27 Thread Catherine Lohmeier
I don't see these POS terminals being affected by HIPAA if in fact they are doing a financial transaction...ie patient is making a payment for services rendered(paying the co-pay with a credit card). Now, there is a network of POS terminals that do eligibility checks and referrals etc..these

Re: Questions in regard to Security/Privacy

2003-02-27 Thread Doug Webb
Catherine, Just a clarification. These non-financial POS terminals would have to use standard transactions (such as 270/271, 278, etc.) to do their job when a standard is available. The opinions expressed here are my own and not necessarily the opinion of LCMH. Douglas M. WebbComputer

Standard transactions - POS Terminals

2003-02-27 Thread Samoe
Douglas, I recently participated in the development of Internet-based online systems with a major health plan. It should be noted that there may be a qualification regarding the requirement to use standard transactions (such as 270/271, 278, etc.) with online systems, i.e. the format portion of

RE: Amendment Questions

2003-02-27 Thread Matthew Rosenblum
Patricia, 1) It depends what you say in your NPP, but HIPAA does not mandate that a CE include past information (i.e., PHI created prior to the compliance date) 2) HIPAA does NOT require a written request from the individual I hope that this helps. Your questions are always welcome. Matt

'Do Not Call' follow-up

2003-02-27 Thread David Frenkel
ATT Government Solutions Awarded $3.5 Million Contract by FTC to Develop And Implement 'Do Not Call' Registry Consumer Registration Expected This Summer VIENNA, Va., Feb 26, 2003 /PRNewswire-FirstCall via COMTEX/ -- ATT Government Solutions announced today it has been awarded a $3.5