Risk Analysis is a thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of e-PHI held by the office. The Risk Analysis uses a series of administrative, physical, and technical safeguards to be assessed to assure that e-PHI is being kept confidential.

Medical practices frequently receive medical record release requests from multiple sources, including subpoenas, attorney letters, and patients themselves. Learn the answers to several frequently asked questions by patients.

When deciding whether to use mobile devices, consider how they will affect the risks (breach of data to the public) to Protected Health Information (PHI), and how to protect and secure health information and data breaches. 

Yes. According to Business & Professions Code Section 680, a health care practitioner, while working, must disclose his or her name and license status on a name tag in at least 18-point type.

A frequently asked question to the CAP Hotline is: Our practice wants to offer "Microdermabrasion". Can the procedure be done by a trained medical assistant, under the supervision of a physician? The answer is no.