Compliance Planning for HIPAA 2 - What Needs to Change in Policies and Procedures

Why Should You Attend:

The HIPAA Privacy and Security Regulations have been modified in regulations previously issued as interim final rules (IFRs) and notices of proposed rule making (NPRMs) by the US Department of Health and Human Services (USDHHS), and the new final rules are now in effect, with enforcement required by September 23, 2013. All kinds of covered entities, and now, business associates of covered entities and their subcontractors as well, need to review their HIPAA compliance, policies, and procedures to see if they are prepared to meet the changes in the rules.

This 90-minute webinar will review the new regulations and discuss their effects on usual practices. You will also learn what policies need to be changed and how. We will show what policies and evidence you need to produce if you are audited by the HHS Office of Civil Rights. Now that there is a legislative mandate to audit compliance, and a random audit plan well under way, you need to be prepared to respond to audit requests. It’s never been more important to review your HIPAA compliance and meet the new requirements.

Areas Covered in the Webinar:

• The new regulations will be reviewed and their effects on usual practices will be discussed, as well as what policies need to be changed and how.
• We will discuss what policies and evidence you need to produce if you are audited by the HHS Office of Civil Rights.
• The features that must be available in EHR systems will be described.
• Learn how the new regulations change the way individuals have access to their records, and how much they can find out about who has accessed their records.
• Find out about how Individuals can now request certain restrictions on disclosures that you must honor.
• Learn about the new requirements for disclosers of health information to apply "minimum necessary" standards.
• Understand the new requirements for Business Associates to comply with HIPAA privacy protections and security safeguards and how BAs are subject to enforcement and penalties directly by HHS.
• Find out about how new limitations on marketing and fund-raising may change how entities can reach out to individuals.
• Learn all about how new audit and penalty requirements increase the need to make sure you are in compliance before HHS OCR knocks on the door.

Jim Sheldon-Dean, is the founder and director of compliance services at Lewis Creek Systems, LLC, a Vermont-based consulting firm founded in 1982, providing information privacy and security regulatory compliance services to a variety of health care providers, businesses, universities, small and large hospitals, urban and rural mental health and social service agencies, health insurance plans, and health care business associates.