Excerpt: The HIPAA privacy rules require covered entities (CEs) to take certain steps that, with the benefit of nearly two years of post-deadline hindsight, appear to be somewhat trivial and unproductive. Some privacy officers have gone so far as to term them a 'waste of time,' because in many instances few patients evidently benefit from these time-consuming actions.

MORE >>