HIPAA Privacy Rule Compliance-Understanding New Rules and Responsibilities of Privacy Officer

ComplianceOnline, Courtyard by Marriott Chicago Downtown, IL
2019-03-21

While the HIPAA rules have been in place for years now, the focus of their application has recently changed as technologies and practices have changed, and changes to the rules are also on the horizon. In addition, there are changes in other regulations that interact with HIPAA requirements, and that require consideration in your planning. This session will focus on understanding what are the challenges that a HIPAA Privacy Officer faces today, and what are the areas of HIPAA that are changing. The session will discuss the latest topics of interest in detail and describe how they relate to the regulations and their enforcement today.

This session is designed to provide an intensive, one and a half-day training in HIPAA Privacy Rule compliance designed for both the seasoned HIPAA professional as well as the individual newly appointed to the position of HIPAA Privacy Officer, covering.

• The foundations of HIPAA and how they relate to the issues of today
• Privacy, Security, and Breach Notification under HIPAA
• Changes in Rules, Technologies, and Practices that Impact HIPAA Compliance
• Patient Rights and Controls on Uses and Disclosures
• New Guidance, and Other Regulations Related to Personal Information
• Challenges with issues today that didn’t even exist a few years ago, such as insecure communications, Ransomware, and the E.U.’s GDPR
• Interactions with the SAMHSA 42 CFR Part 2 regulations on information relating to substance use disorders

Learning Objectives:

This Seminar is designed for the HIPAA expert and HIPAA newbie alike who wishes to stay up with changes to HIPAA and related regulations in personal information privacy and security, as well as understand the regulatory issues most frequently encountered in day-to-day operation of health care entities. Objectives include learning related to a variety of topics, including:

• Understanding the variety of forms entities can take under HIPAA and how they relate to one another
• Learning about patient rights, such as access and amendment of information, and how such rights are protected and enforced under HIPAA
• How uses and disclosures may take place in a wide variety of circumstances, including such hot topics as sharing information with the family and friends of a patient
• Current enforcement and audit activity
• Changes to Substance Use Disorder records confidentiality under 42 CFR Part 2
• The European Union’s General Data Protection Regulation (GDPR)
• Ensuring individuals have adequate access of their information under the rules.
• The place of Information Security and incident management under the HIPAA Security and Breach Notification Rules
• Processes to be used in managing security, mitigating risks, and handling incidents
• Proper methods of documentation and training to ensure compliance and help avoid penalties, including the use of internal audits
• and drills to improve compliance continuously and be prepared for incidents and enforcement investigations

Jim Sheldon-Dean is the founder and director of compliance services at Lewis Creek Systems, LLC, a Vermont-based consulting firm founded in 1982, providing information privacy and security regulatory compliance services to a wide variety of health care entities.

Mr. Sheldon-Dean serves on the HIMSS Information Systems Security Workgroup, has co-chaired the Workgroup for Electronic Data Interchange Privacy and Security Workgroup, and is a recipient of the WEDI 2011 Award of Merit. He is a frequent speaker regarding HIPAA and information privacy and security compliance issues at seminars and conferences, including speaking engagements at numerous regional and national healthcare association conferences and conventions and the annual NIST/OCR HIPAA Security Conference in Washington, D.C.

He has more than 30 years of experience in policy analysis and implementation, business process analysis, information systems and software development. His experience includes leading the development of health care related Web sites; award-winning, best-selling commercial utility software; and mission-critical, fault-tolerant communications satellite control systems. In addition, he has eight years of experience doing hands-on medical work as a Vermont certified volunteer emergency medical technician. He received his B.S. degree, summa cum laude, from the University of Vermont and his master’s degree from the Massachusetts Institute of Technology.