Throughout the year we created cartoons to spread the word about HIPAA Privacy and Security and our services. Here is a look back! Many of the cartoons are inspired by stories on our blog at www.gettinslaw.com. Visit the link in the video or from the reference list below to read the stories. Do you know where your ePHI is? http://gettinslaw.com/hipaa/2014/09/02/state-attorney-general-hits-provider-with-150000-hipaa-fine/ Are you training and monitoring your staff? http://gettinslaw.com/hipaa/2014/06/24/cincy-ex-boyfriend-learns-about-std-and-posts-it-on-facebook/ Be wary of Phishing. Verify credentials before giving information! http://gettinslaw.com/hipaa/2014/08/11/my-personal-phishing-experience/ Follow HIPAA security standards when emailing! http://gettinslaw.com/hipaa/2014/07/15/email-error-leads-to-a-hipaa-breach/ Security monitoring can detect inadvertent reconfigurations. http://gettinslaw.com/hipaa/2014/05/22/server-deactivation-leads-to-4-8-hipaa-settlement/ Where are you disposing of your health records? http://gettinslaw.com/hipaa/2014/06/04/phi-found-in-dumpster-it-happened-again/ FTC cracks down on false claims. http://gettinslaw.com/hipaa/2014/03/17/your-hipaa-violation-is-in-the-mail/ Health care privacy class actions- do the math. http://gettinslaw.com/hipaa/2014/05/22/server-deactivation-leads-to-4-8-hipaa-settlement/ Theft and loss is the #1 Health Care Security risk. http://gettinslaw.com/hipaa/2014/05/22/server-deactivation-leads-to-4-8-hipaa-settlement/ Email attachments can be dangerous! http://gettinslaw.com/hipaa/2013/12/11/malware-attack-results-in-a-huge-hipaa-breach/ Careful what you print on mail and envelopes. http://gettinslaw.com/hipaa/2014/03/17/your-hipaa-violation-is-in-the-mail/ Patient information may only be used for permitted and authorized purposes. http://gettinslaw.com/hipaa/2013/08/15/walgreens-fined-1-4-million-for-ex-girlfriend-snooping/ Watch where you save information in the cloud. http://gettinslaw.com/hipaa/2014/04/10/hipaa-breach-in-the-cloud-leads-to-cosmic-damage/

1. HIPAA Cartoons
2014 Year in Review
Presented by: ettins’ Law, LLC 513-400-3598 mbgettins@gettinslaw.com

2. Throughout the year we
created cartoons to
spread the word about
HIPAA Privacy and
Security and our
services.
Here is a look back!
Mary Beth Gettins,
Managing at Gettins’ Law

3. Privacy laws limit what you can say on line.
http://gettinslaw.com/hipaa/2014/12/16/what-i-can-say-on-social-media-
without-going-awry-of-hipaa-privacy-laws/

5. Social media gone wrong.

7. Do you know where your ePHI is?
http://gettinslaw.com/hipaa/2014/09/02/state-attorney-general-hits-provider-
with-150000-hipaa-fine/

9. Are you training and monitoring your staff?
http://gettinslaw.com/hipaa/2014/06/24/cincy-ex-boyfriend-learns-about-std-
and-posts-it-on-facebook/

11. Be wary of Phishing. Verify credentials before
giving information!
http://gettinslaw.com/hipaa/2014/08/11/my-personal-phishing-experience/

13. Follow HIPAA security standards when emailing!
http://gettinslaw.com/hipaa/2014/07/15/email-error-leads-to-a-hipaa-breach/

15. Security monitoring can detect inadvertent
reconfigurations.
http://gettinslaw.com/hipaa/2014/05/22/server-deactivation-leads-to-4-8-hipaa-
settlement/

17. Where are you disposing of your health records?
http://gettinslaw.com/hipaa/2014/06/04/phi-found-in-dumpster-it-happened-
again/

19. FTC cracks down on false claims.
http://gettinslaw.com/hipaa/2014/03/17/your-hipaa-violation-is-in-the-mail/

21. Business Associates are now on the hook for
HIPAA violations.

23. Health care privacy class actions- do the math.
http://gettinslaw.com/hipaa/2014/05/22/server-deactivation-leads-to-4-8-
hipaa-settlement/

25. Theft and loss is the #1 Health Care Security risk.
http://gettinslaw.com/hipaa/2014/05/22/server-deactivation-leads-to-4-8-
hipaa-settlement/

27. Email attachments can be dangerous!
http://gettinslaw.com/hipaa/2013/12/11/malware-attack-results-in-a-huge-
hipaa-breach/

29. Careful what you print on mail and envelopes.
http://gettinslaw.com/hipaa/2014/03/17/your-hipaa-violation-is-in-the-mail/

31. Patients have the right to receive results directly
from lab providers.

33. Patients have right to restrict communication of
their medical information.

35. Patient information may only be used for
permitted and authorized purposes.
http://gettinslaw.com/hipaa/2013/08/15/walgreens-fined-1-4-million-for-ex-
girlfriend-snooping/

37. Wipe devices before reuse or disposal.

39. Watch where you save information in the cloud.
http://gettinslaw.com/hipaa/2014/04/10/hipaa-breach-in-the-cloud-leads-to-cosmic-
damage/

41. You can read the blog posts that inspired the
cartoons on:

42. Offering Privacy and Security
• Standards Manual,
• Training,
• Analysis/Assessments,
• Tracking/Monitoring
www.gettinslaw.com 513-400-3895 mbgettins@gettinslaw.com