Four Factors to evaluate for new breach risk assessment with the probability that PHI has been compromised. To avoid penalties for noncompliance, your practice must comply with the Omnibus Rule by Sept. 23, 2013.

While hospitals may have security staff, that's rarely the case for physicians.

Doctors often get into the field of medicine because they love helping people their patients. However, from time to time, a patient’s behaviors and actions may require the physician to sever ties.

The HIPAA Omnibus Rule marks the most sweeping changes to the HIPAA privacy and security rules since they were first implemented nearly 18 years ago. Under the rule, first-time violations can be up to $50,000 per incident per year and repeat violations can result in a $1.5 million fine.

Physicians need to look to create an environment in which patients feel attended to, responded to, and respected. Carole Lambert, MPA, RN, assistant vice president, Membership Review and Education, residents program director for the Cooperative of American Physicians, says that starts with medical practice staff.