And still others, some of the smaller physician-owned practices, are operating as usual and are of the opinion that this will not impact them at all. They're mistaken, she says.
"The larger physician groups and the ones aligned with larger health systems are a bit more attuned to these concerns than the smaller practices, giving some thoughts to what they're facing and how to get to a better place," Ruff says. "Others are preparing but don't know exactly where to go and what to do. And then there are the smaller physician groups, the privately owned practices that are not too concerned about it and planning to just wait it out, and see if they can stay afloat. We do not recommend just waiting it out, no matter how small your practice."
Actually getting your EMR up and running isn't enough. Practices must conduct a security risk analysis, notes Evan S. Schwartz, JD, founding partner of the law firm Quadrino Schwartz in Garden City, N.Y.
The analysis should show that the system does meet the strict standards required by the law.
Insurers also are auditing practices at an increasing rate, he says.