3 Tips For HIPAA Privacy Officers
The HIPAA compliance world awaits two major final rules per HITECH—the breach notification final rule and the rule that covers modifications to the privacy, security and enforcement rules.
But that’s no reason to sit idle.
Here are a few tips for HIPAA privacy and security officers as they await the final rules:
1. Focus on business associates (BAs) and contracts with them. CEs need to be certain that they have identified all of their BAs and that they are bound by BA agreements, says John C. Parmigiani, MS, BES, president of John C. Parmigiani & Associates, LLC, in Ellicott City, MD.
HITECH made BAs subject to compliance with the HIPAA Security Rule and the use and disclosure provisions of the HIPAA Privacy Rule.
The proposed rule makes it clear that HIPAA and HITECH apply to BAs and require them to comply with most of the same rules as CEs. If they haven’t done so already, CEs must review their BA agreements to ensure that they include appropriate language, says Phyllis A. Patrick, MBA, FACHE, CHC, cofounder and managing director of AP Health Care Compliance Group, which has offices in Pittsburgh and Purchase, NY.
- MU Compliance Announcement Sparks Concern, Confusion
- New G-Codes to Pay Doctors for Broad Array of Non-Face-to-Face Care
- Scary Financial Challenges for 2014
- MGMA Urges 'End-to-End' ICD-10 Testing
- 1 in 5 CT Screenings for Lung Cancer Results in Overdiagnosis
- Telehealth Improves Patient Care in ICUs
- CMS Sets 2014 Pay Rates for Hospital Outpatient and Physician Services
- LifePoint Bolsters Presence in Michigan's Upper Peninsula
- States Rejecting Medicaid Expansion Forgo Billions in Federal Funds
- Douglas Hawthorne—A Chance to Do Something Big