Q. We decided to improve physical security by distributing visitor badges to visitors and patients. A color-coded badge indicates the wearer's destination by floor. The facility's mental health clinic is the only treatment center on the floor where it is located. Some mental health patients visit our cafeteria, which is open to work force members, visitors, and other patients, before their appointments. Does the possibility that an individual might know the color associated with the location of the mental health clinic constitute a HIPAA violation?

Effective November 1, hospitals must have a plan to detect, mitigate, and prevent red flags that signal potential identity theft. This is a requirement under the Identity Theft Red Flags and Address Discrepancies Under the Fair and Accurate Credit Transactions Act of 2003 (final rule).

California Governor Arnold Schwarzenegger has signed legislation creating an oversight office to police patient privacy and increasing potential fines for violations, The Los Angeles Times reported October 1.