Patient Privacy: Keep HIPAA Concerns at Bay With Simple Risk Analysis

Why This Topic Matters

Organizations handling electronic protected health information need to understand where privacy and security risks can arise and why enforcement attention may increase when risks are not identified and addressed. The article helps readers gauge whether the topic is relevant to their HIPAA compliance and security practices.

Article Sections

1. Willful Neglect Penalties and HITECH Background

   Introduces the enforcement context surrounding HIPAA privacy and security violations and the HITECH-era changes discussed in the article.

2. Nail Down the Essentials for Risk Analysis

   Outlines the article’s discussion of general risk analysis concepts and the systems and information flows that should be reviewed.

3. Target These 2 High-Risk Areas

   Covers broad categories of operational risk involving portable devices, electronic communication, and related safeguards.

4. Watch Out for Remote Access

   Discusses remote work and offsite access as compliance and security concerns for organizations handling sensitive electronic information.

5. Don't Forget a Crucial Compliance Step: Auditing

   Summarizes the article’s attention to auditing and oversight as part of ongoing HIPAA compliance efforts.