Part B Insider - 2018 Issue 4
HIPAA: Ace Your Security Rule Compliance with 3 Tips
Subscribe or sign in to view the full article.
Article Overview
This article explains how HIPAA Security Rule compliance issues can be informed by recent HHS Office for Civil Rights enforcement activity. It focuses on broad practice-level safeguards for physical security, administrative oversight of technology, and encryption/device control for electronic protected health information. The piece is intended for healthcare practice leaders, compliance staff, and others responsible for safeguarding health information and reducing breach risk.
Why This Topic Matters
Security Rule compliance affects how practices protect patient information, manage technology, and respond to breach risk. Understanding the article helps readers identify the kinds of operational safeguards and oversight themes regulators emphasize.
Article Sections
-
Tip 1: Confirm Physical Safeguards are Rock Solid
Discusses practice-location and equipment security themes under the HIPAA Security Rule. Emphasis is placed on physical access controls and safeguarding devices and facilities.
-
Tip 2: Outline Access, Movement, and Removal of Practice HIT
Covers administrative safeguard themes related to managing health information technology and internal oversight. The section highlights responsibilities, protocols, and staff awareness around technology control.
-
Tip 3: Encrypt ePHI and Maintain Device Control
Addresses device management and protection of electronic protected health information. The section focuses on safeguarding portable technology and reducing exposure risk through general security measures.
What You Will Learn
- How the HIPAA Security Rule is framed in relation to practice operations
- The broad categories of safeguards discussed in recent OCR enforcement context
- Why oversight of devices and technology matters for protecting electronic health information
- How compliance teams can use enforcement examples as a general learning tool
Who Should Read This
- Healthcare practice administrators
- Compliance officers
- Privacy and security staff
- Surgery practice managers
- Health information technology staff
Subscribe or sign in to view the full article.
Quick, Current, Complete - www.findacode.com