5 steps to protect patient data, meet meaningful use security requirement

Why This Topic Matters

The topic matters because it connects patient data protection obligations with EHR incentive program participation and related audit readiness. It is relevant to practices that need a high-level understanding of security review expectations and documentation needs.

Article Sections

1. Introduction

   Introduces the relationship between patient data protection, HIPAA security obligations, and a meaningful use security requirement tied to EHR participation.

2. How to meet measure 15

   Outlines the article’s five broad approaches for addressing the security requirement and preparing for attestation-related scrutiny.

3. Know the difference between measure 15 and existing HIPAA requirements

   Discusses the distinction between general privacy and security obligations and the broader review activity associated with the meaningful use program.

4. Turn to your vendor or regional extension center (REC)

   Describes the option of seeking outside assistance for a security review and the role of external support resources.

5. Do the security assessment yourself

   Covers the option of performing the review internally and the general types of environment factors practices may consider.

6. Preserve a record of the assessment and measures taken

   Addresses documentation of the review process and retention of records showing that security-related evaluation and follow-up occurred.

7. Take the very simple step of attesting to measure 15

   Summarizes the attestation component and the article’s discussion of recordkeeping, reporting, and audit awareness.