What is HIPAA?
HIPPA is the Health Insurance Portability and Accountability Act which was passed by Congress in 1996.
HIPPA is responsible for the following:
- Provides the ability to transfer and continue health insurance coverage for millions of American workers and their families when they change or lose their jobs
- Reduces health care fraud and abuse
- Mandates industry-wide standards for health care information on electronic billing and other processes
- Requires the protection and confidential handling of protected health information
The HIPPA privacy regulations require healthcare providers and organizations, as well as their business associates, to develop and follow procedures that ensure the confidentiality and security of protected health information when it is transferred, received, handled, or shared. This applies to all forms of protected health information such as but not limited to:
- Paper
- Oral
- Electronic
Why HIPAA compliance is a good idea
HIPAA compliance affirms the security of your services and gives your organization the ability to provide clients and regulators evidence from an auditor who has actually seen your internal controls in place and operating.
HIPAA compliance can help your organization:
- Maintain loyal clients and attract new ones
- Operate more efficiently
- Avoid fines for non-compliance or from breaches
- Assure clients that their PHI is protected and risk free
HIPAA is important because it ensures healthcare providers, health plans, healthcare clearinghouses, and business associates of HIPAA-covered entities must implement multiple safeguards to protect sensitive personal and health information.
How do we do it?
Our security professionals help you accomplish this goal by implementing recurring training, security protocols, controls, and policies.
At Rhymetec we develop a HIPAA-secure cyber security program just for you which aligns with your business goals and optimizes your operations. This will ensure compliance.
- We conduct risk analysis and gap analysis
- Review and assess your policies and controls
- Provide 1-on-1 IT support from a HIPAA compliance specialist
- Research, recommend, and implement the right technologies to help your business run smoothly and safely
We ensure the use of the following but not limited to:
Technical Protections
- Encrypt & Authenticate EPHI
- Control/Log Access & Changes to EPHI
- Auto-LogOff
Administrative Protections
- Assess & Manage Risk
- Train Staff
- Block Unauthorized Access
- Train Staff
- Sign BAAS
- Build/Test Contingencies
- Document Security Incidences
Physical Protections
- Control/Monitor Physical Access
- Manage Workstations
- Protect and Track EPHI Devices
HIPAA Omnibus Rule-To-Do
- Refresh Your BAA
- Send New Copies
- Modernize NPPS
- Train Staff
- Update Privacy Policies
HIPAA Privacy Rule To-Do
- Respond to Patient Access Requests
- Maintain EPHI Integrity
- Inform Patients With NPPS
- Get Permission to use EPHI
- Train Staff
- Update Forms/Copy
- Update Forms/Copy
HIPAA Breach Notification Rule To-Do
- Promptly Notify Patients
- HHS & Potentially The Media
- Ensure Your Notification Contains The 4 Required Elements
Deliverables from Rhymetec
Our team is dedicated to delivering premium-tier service to ensure HIPAA compliance, from comprehensive data management plans, to fully itemized reports that provide information regarding methodology, findings, potential mitigations, and our recommendations.
Rhymetec specializes in enabling meaningful, real world solutions to the most pressing challenges of the modern enterprise security environment. Assessment and reporting is contextualized to your business sector, and custom-tailored to your specific environment.
Our process is engineered to provide all the data and insights needed for you to make informed decisions and take definitive action.
