60 likes | 184 Vues
This document outlines the key objectives and regulations of HIPAA Security, emphasizing the importance of maintaining the confidentiality, accessibility, and integrity of electronic health records. Key regulations include the implementation of administrative, physical, and technical safeguards, as well as necessary policies, procedures, training, and sanctions to protect health data. Organizations must conduct assessments of their current security posture, address required and addressable standards, and ensure up-to-date Business Associate Agreements by April 21, 2005.
E N D
HIPAA Security Regulations Jean C. Hemphill Ballard Spahr Andrews & Ingersoll, LLP November 30, 2004
Health Insurance Portability & Accountability Act of 1996 (“HIPAA”) • Standard Electronic Transactions – • October 16, 2003 • Privacy Rule -- April 14, 2003 • Security – April 21, 2005
Security Regulations Objectives • Keep electronic records confidential • Keep records accessible to members • Use records for intended purposes only • Protect integrity of records from • Hackers • Viruses • Unauthorized disclosures • Inadvertent destruction
HIPAA Security Regulations • Standards for • Administrative Safeguards • Physical Safeguards • Technical Safeguards • Organizational Requirements • Policies & Procedures • Training & Sanctions
HIPAA Security Regulations • Assessment of your organization’s current electronic security environment • Required standards • Addressable standards • Examples of Required Standards: • Security incident procedure, data backup plan, disaster recovery plan, emergency mode operation plan
HIPAA Security Regulations • By April 21, 2005 • Designate a security official • Address the required measures • Consider the addressable measures • Document your policies and procedures • Update Business Associate Agreements • Train the workforce