HIPAA Security and Breach Rule Compliance- Understanding Risk Analysis, Policies and Procedures and Managing Incidents

ComplianceOnline, Philadelphia, PA
2019-05-09

This seminar is designed to provide intensive, two-day training in HIPAA Security and Breach Notification Rule compliance, including:

• What’s new in the regulations?
• What’s changed recently?
• What needs to be addressed for compliance by covered entities and business associates?
• What are the most important security issues?
• What needs to be done for HIPAA compliance?
• What can happen when compliance is not adequate?

This session will also explain HIPAA Security safeguards and the role of risk analysis in effectively evaluating and implementing Security Rule compliance. Audits and enforcement will be explained, as well as security breaches and how to prevent them. Numerous references and sample documents will be provided.

Learning Objectives:

• Understand the structure of the HIPAA Regulations and how they work together
• Learn what has changed in the rules based on the HIPAA Omnibus Update Rule
• What has to be modified to meet the new rules and how to interpret them
• Understand how to use Risk Analysis to make compliance decisions
• Know what safeguards must be considered to provide security for health information
• Understand what makes a good information security policy
• Know how to respond to breaches and violations of Privacy and Security rules
• Work through practical examples of risk analysis
• Learn how to deal with the modern portable technologies and communication methods
• Understand how to use policies, documentation, training, and drills to prepare for audits and incidents, and achieve good compliance

Jim Sheldon-Dean is the founder and director of compliance services at Lewis Creek Systems, LLC, a Vermont-based consulting firm founded in 1982, providing information privacy and security regulatory compliance services to a wide variety of health care entities.

Mr. Sheldon-Dean serves on the HIMSS Information Systems Security Workgroup, has co-chaired the Workgroup for Electronic Data Interchange Privacy and Security Workgroup, and is a recipient of the WEDI 2011 Award of Merit. He is a frequent speaker regarding HIPAA and information privacy and security compliance issues at seminars and conferences, including speaking engagements at numerous regional and national healthcare association conferences and conventions and the annual NIST/OCR HIPAA Security Conference in Washington, D.C.

He has more than 30 years of experience in policy analysis and implementation, business process analysis, information systems and software development. His experience includes leading the development of health care related Web sites; award-winning, best-selling commercial utility software; and mission-critical, fault-tolerant communications satellite control systems. In addition, he has eight years of experience doing hands-on medical work as a Vermont certified volunteer emergency medical technician. He received his B.S. degree, summa cum laude, from the University of Vermont and his master’s degree from the Massachusetts Institute of Technology.