Healthcare IT Challenges – Prioritizing HIPPA Compliance

As CIOs focus on security regulation compliance, their attention must focus on the recently released HIPAA Privacy, Security, Enforcement, and Breach Notification Rules.[1] While the rules will not go into effect until March 26, 2103, facilities must already begin preparing to meet compliance.

Some of the highlights of this new regulation include a

• clarification of the breach notification policies,
• greater control over marketing uses of identifiable health information,
• clarification of accountability for all business associates including subcontractors,
• and improved access for patients to get their electronic health information.

It is essential that facilites understand the requirements and have people and mechanisms in place to conduct a security risk assessment in light of the updated regulations. This may be a challenge since many facilities have fallen behind in completing a scheduled risk assessment.

Each organization must also assess their current policies and procedures including documentation protocols, corrective actions plans, review of staff regulatory knowledge, plans for staff training, and evaluation of business partner compliance. Organization should also identify non-compliance issues and implement corrective actions.

[1] See “Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules.” Health and Human Services Department, January 25, 2013

The post Healthcare IT Challenges – Prioritizing HIPPA Compliance appeared first on Integracon Technologies Blog – Computer Support in Knoxville, TN.