HIPAACompliance 2013 - HIPAA Compliance Though Policies

Overview: The Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its regulations (the "Privacy Rule" and the "Security Rule") protect the privacy of an individual's health information and govern the way that covered entities and now business associates collect, maintain, use, and disclose protected health information ("PHI"). Creation and implementation of policies and procedures are a requirement for HIPAA compliance.
For HIPAA, if it is not in writing, it is not. This maxim holds true for all covered entities and business associates when creating and implementing HIPAA compliance policies and procedures. To ensure compliance with HIPAA regulations, an organization must have written documentation as set forth by HIPAA's administrative requirements. Now that DHHS is considering breaches involving lack of a policy (even if HIPAA does not say that you must have a policy concerning that activity) as willful neglect, which carries the stiffest civil money penalties, you must consider what policies you need.
In this webinar, we will discuss what the required policies are, policies that you must have if they are reasonable and appropriate, and other policies that are not mentioned in HIPAA but that DHHS may nonetheless consider as being necessary. Learn what a policy should contain and how to draft a policy.
Areas Covered in the Session:
The HIPAA requirement to have policies and procedures
Required policies
Addressable policies
Other policies that may be necessary
Contents of HIPAA policies
How to write a policy
Training on policies
Retention of policies
Who Will Benefit:
HIPAA Compliance Officers
HIPAA Security Officers
HIPAA Privacy Officers, CFOs
CIOs
Medical Records Personnel
Health Information Management Professionals
Health Care Attorneys
Billing Services
Jonathan P. Tomes , J.D., is a health care attorney and partner in the law firm of TOMES & DVORAK, CHARTERED. He has written more than 50 books, including The Compliance Guide to HIPAA and the DHHS Regulations, and dozens of articles in the area of HIPAA compliance.
He has been an expert witness in litigation involving health information compliance issues and is the President of EMR Legal, Inc., a national HIPAA consulting firm. His knowledge of the law and of the practical aspects of setting up a security system provides a rare opportunity for compliance officers and medical records veterans and novices alike. Mr. Tomes has presented seminars nationally for 20 years.