Healthcare 2020 - 3-Hour Virtual Seminar on HIPAA Privacy Rule Compliance-Understanding New Rules and Responsibilities of Privacy Officer

Overview:
This session is designed to provide intensive training in HIPAA Privacy Rule compliance designed for both the seasoned HIPAA professional as well as the individual newly appointed to the position of HIPAA Privacy Officer.
The session begins with overview of the HIPAA regulations and then continues with presentation of the specifics of the Privacy Rule, such as Individual Rights and Uses & Disclosures, and recent and expected changes to HIPAA and other rules such as 42 CFR Part 2 regarding Substance Use Disorder information, including the impacts of required changes in your practices to meet the rules.
The discussion will include special considerations for circumstances such as the COVID-19 pandemic and sharing of information for public health purposes.
Topics include:
The foundations of HIPAA and how they relate to the issues of today
Privacy, Security, and Breach Notification under HIPAA
Changes in Rules, Technologies, and Practices that Impact HIPAA Compliance
Patient Rights and Controls on Uses and Disclosures
Managing Patient Communication Rights, Texting, and Telemedicine
Considerations for Circumstances Such As Declared Emergencies
New Guidance, Court Decisions, and Other Regulations Related to Personal Information
Challenges with New Issues, such as Insecure Communications and Ransomware
Interactions with the SAMHSA 42 CFR Part 2 regulations on Information Relating to Substance Use Disorders
Security Breaches and Ways to Prevent and Respond To Them
Numerous references and sample documents will be provided
Why you should Attend: This Seminar is designed for the HIPAA expert and HIPAA newbie alike who wishes to stay up with changes to HIPAA and related regulations in personal information privacy and security, as well as understand the regulatory issues most frequently encountered in day-to-day operation of health care entities, as well as during emergencies.
Objectives include learning related to a variety of topics, including:
Understanding the variety of forms entities can take under HIPAA and how they relate to one another
Learning about the roles of HIPAA Business Associates and obligations for their management
Learning about patient rights, such as access and amendment of information, and how such rights are protected and enforced under HIPAA
How uses and disclosures may take place in a wide variety of circumstances, including such hot topics as sharing information with the family and friends of a patient
How the rules support emergency responses and how they may be applied in declared emergencies
What is current enforcement and audit activity, including an emphasis on patient access of information
Using new communications technologies such as texting and telemedicine according to the rules
Learn about new and upcoming changes to Substance Use Disorder records confidentiality under 42 CFR Part 2
Ensuring individuals have adequate access of their information under the rules
The place of Information Security and incident management under the HIPAA Security and Breach Notification Rules
Processes to be used in managing security, mitigating risks, and handling incidents
Proper methods of documentation and training to ensure compliance and help avoid penalties
The use of internal audits and drills to improve compliance continuously and be prepared for incidents and enforcement investigations
Areas Covered in the Session: Part one sets the stage with an overview of the HIPAA regulations and then continues with presentation of the specifics of the Privacy Rule and issues such as communications and responding to emergency circumstances, as well as recent and expected changes to HIPAA, including the impacts of required changes in your practices to meet the rules.
Overview of HIPAA Privacy, Security, and Breach Notification Regulations
Types of Entities
Entity Relationships
Business Associates, including Guidance on Compliance Liabilities
Current Issues in HIPAA, including Responding to Emergencies
HIPAA Privacy Rule and Patient Rights
The Designated Record Set
Access
Amendment
Restrictions
Communications, including Texting and Telemedicine
HIPAA Privacy Rule and Uses and Disclosures of PHI
Using Protected Health Information
Disclosures to family and friends, including During Emergencies
Disclosures to providers, care coordinators, etc.
Disclosures to attorneys, the Attorney General’s office, etc., minors and guardian issues
Day-to-day disclosures
Training and Documentation Requirements
Part two begins with a discussion of current top issues in HIPAA compliance and privacy, and a detailed examination of HIPAA Security Rule and Breach Notification requirements, including what you need to do to protect information and what you have to do if you don't.
The day concludes with a session on the essential activities of documenting policies, procedures, and activities, training staff and managers in the issues and policies they need to know about, and examining compliance readiness through drills and self-audits, all as part of a 10-step plan for reviewing and maintaining HIPAA compliance.
Current Hot Topics in HIPAA and Privacy
Emergencies and HIPAA
Enforcement and Audits, including When They May Be Suspended
Coordination with 42 CFR Part 2 and Substance Use Disorder information
Access of Information, including Rules on Data Blocking and Enforcement
HIPAA Security and Breach Notification Rule Principles
How the Privacy, Security, and Breach Rules Work Together
Security Safeguards and The Role of Risk Analysis
Determining What Is a Breach and What Must Be Reported
Incident Management and Breach Reporting
Documentation, Training, Drills and Self-Audits
The 10-Day HIPAA Compliance Plan
How to Organize and Use Documentation to Your Advantage
Training Methods and Compliance Improvement
Conducting Drills in Incident Response
Using the HIPAA Audit Protocol for Documentation
Who Will Benefit:
CEO
HIPAA Privacy Officers
HIPAA Security Officers
Information Security Officers
Risk Managers
Compliance Officers
Privacy Officers
Health Information Managers
Information Technology Managers
Information Systems Managers
Medical Office Managers
Chief Financial Officers
Systems Managers
Chief Information Officer
Healthcare Counsel/lawyer
Operations Directors
Jim Sheldon Dean - MentorHealthSpeaker Profile
Jim Sheldon-Dean is the founder and director of compliance services at Lewis Creek Systems, LLC, a Vermont-based consulting firm founded in 1982, providing information privacy and security regulatory compliance services to a wide variety of health care entities.
Sheldon-Dean serves on the HIMSS Information Systems Security Workgroup, has co-chaired the Workgroup for Electronic Data Interchange Privacy and Security Workgroup, and is a recipient of the WEDI 2011 Award of Merit. He is a frequent speaker regarding HIPAA and information privacy and security compliance issues at seminars and conferences, including speaking engagements at numerous regional and national healthcare association conferences and conventions and the annual NIST/OCR HIPAA Security Conference in Washington, D.C.