Help Me With Hipaa

In this episode we discuss how to take the first steps to building a "culture of compliance" in your organization. Every project has to start somewhere but where do you start with something as big and complicated as HIPAA? Well.... Just like the joke goes "How do you eat an elephant?" "One bite at a time." How do you break HIPAA Compliance into bite sized pieces and get your project moving? We have some tips for you.   Glossary   A culture of compliance is when an organization establishes standards, rules, and policies that aren't simply distributed to the workforce. The organization as a whole takes their compliance serious at a personal level. Each person agrees to abide by the standards, rules, and policies set forth and holds themselves accountable to each other for doing so. This culture can only be accomplished if it is done from the CEO all the way down the organization to the volunteers and/or temporary employees.   Links Posts From Donna's Blog SmallProviderHIPAA.com How do you create a culture of HI

HIPAA requires encryption in transit and lists encryption at rest as addressable.  What does all that mean?

Help Me with HIPAA does have a point and vision even if it doesn't seem like it sometimes.  Learn about your hosts and the plan for the show.

In this episode we discuss the definition of a Business Associate.  How do you find your Business Associates and what should your process for managing them include. Glossary A managed service provider (MSP) is a third-party contractor that is under contract (usually a monthly fee) to provide on-going technology support to other organizations.   Notice of Privacy Practices (NPP) is the document CEs provide to patients when they begin treatment or coverage.  It is the document that defines the CEs Privacy, Security, and Breach Rule commitments to the patient.     Links WEDI BA Decision Tree WEDI Business Associates & HITECH Deep Dive  FindHealthcareIT  HIPAAforMSPS.com  Kardon Compliance   Notes 1. Anyone that CReMaTs PHI on behalf of a CE or another BA      Another way to think of it Produced, Received, Saved, Transferred 2. Upstream and Downstream BAs 3. BAAs and what they really mean 4. What are BAs supposed to do?    Security Rule,   Breach Plan,   Portions of the Privacy rule.    OCR - do what CEs are