BC Advantage - 2005 Issue 12
HIPAA - helps in times of disaster
Subscribe or sign in to view the full article.
Article Overview
This article explains how HIPAA applies when healthcare organizations face natural disasters and other emergencies, with emphasis on privacy, security, contingency planning, and recovery preparedness. It is aimed at healthcare compliance staff, administrators, and others responsible for protecting patient information and maintaining operations during disruptions. The discussion also references government guidance on permitted disclosures in emergency situations and the importance of planning, documentation, testing, and staff training.
Why This Topic Matters
Disasters can interrupt access to patient information, facilities, staff, and business systems. Understanding the general HIPAA framework for emergency response and recovery helps organizations prepare to protect information and continue operations.
Article Sections
-
HIPAA and disaster situations
Introduces the relationship between healthcare privacy protections and major disasters, including the role of federal guidance during emergencies.
-
Privacy Rule considerations
Discusses privacy-related concerns during disruptions, including the handling of protected health information and broader operational impacts on healthcare entities.
-
Security Rule and contingency planning
Covers security-related preparedness topics such as contingency planning, recovery readiness, and safeguarding electronic information systems during emergencies.
-
Risk analysis, backup, and continuity operations
Addresses general planning activities for interruptions and disasters, including risk assessment, backup preparation, and maintaining operations when systems are unavailable.
-
Recovery, testing, and documentation
Reviews the need to restore systems, test preparedness measures, document compliance efforts, and train staff for disaster response.
-
OCR bulletin guidance on permitted disclosures
Summarizes the article’s cited federal guidance describing broad categories of disclosures that may be permitted during emergencies and disaster relief efforts.
What You Will Learn
- How HIPAA relates to disaster preparedness and response
- What broad privacy and security issues arise when healthcare operations are disrupted
- Why contingency planning, backups, and recovery procedures matter
- How testing, documentation, and staff training support emergency readiness
- What kinds of federal guidance the article references for emergency disclosures
Who Should Read This
- Healthcare compliance professionals
- Practice administrators
- Health information managers
- Privacy and security officers
- Healthcare organization leaders
- Medical office staff responsible for HIPAA preparedness
Subscribe or sign in to view the full article.


Quick, Current, Complete - www.findacode.com