1. HIPAA Compliance

2. What is it? The federal Health Insurance Portability and Accountability Act of 1996. Ensures the privacy rights of patients

3. ePHI Electronic protected health information – All health information covered under HIPAA Anything that is – Produced – Saved – Transferred – Received In electronic form

4. What information is protected? Patient name Addresses Social Security Number Medical Record Number Email Addresses Photo Images

5. Technical side of things Access Control Audit Controls Integrity Authentication Transmission Security Contingency Planning

6. Access Control Unique user identification Emergency Access Procedure Automatic Logoff Encryption & Decryption

7. Authentication Verify people trying to access ePHI

8. Transmission Control Integrity Controls Encryption

9. Audit Controls Logs of transactions & information changes

10. Integrity ePHI is not changed or altered

11. Contingency Planning Emergency Mode

12. But how can I make it happen? Firewalls User Accounts Security Software Procedures

13. Why go through the trouble?

14. Non-Compliance Fines ViolationPer Violation Did Not Know$100-$50,000 Reasonable Cause$1,000-$50,000 Willful Neglect $10,000-$50,000

15. History Enitity- CIGNET WellPoint Blue Cross Idaho State U Voilation- Database Error Unencrypted USB Stolen Unencrypted Drive Stolen Breach of unsecured data Fine $4,300,000 $1,700,000 $1,500,000 $400,000 Penalty for HIPAA Violation

16. Questions? Keith Bell – 717-870-4042 – kbell@ghostechs.com Ned Einsig – 717-850-5672 – ned@ghostechs.com