Updating HIPAA Compliance in Medical Offices

This HIPAA compliance training will focus on the privacy policies and Notices of Privacy Practices that must be updated to ensure compliance with the final HIPAA Omnibus rule. Attendees will learn best practices to avoid breaches and penalties for non-compliance.

Why Should You Attend:

The new Omnibus update to the HIPAA regulations now in effect contains numerous changes based, for the most part, on The HITECH Act passed in 2009. Some of the most significant changes for medical offices have to do with changes to individual rights under HIPAA that require updates in policies and procedures and must be properly noted in their forms and notices.

This webinar will review the new regulations and will discuss their effects on HIPAA policies. It will describe the new rights that must be added to a medical office’s policies and NPP, and identify the places where current rights need to be modified. It will also discuss typical policy content and describe the places where changes have to be ideally made, and discuss the information that needs to be added or removed to meet requirements most efficiently and economically. Sample policies will be examined.

This webinar will also examine a typical NPP and describe the places where changes might best be made, and discuss the information that needs to be added or removed to meet requirements most efficiently and economically. The work that must be done for updating HIPAA compliance for medical offices will be outlined, with a to-do list of activities that must be undertaken to ensure compliance, and identification of additional resources and templates.

Areas Covered in the Webinar:

• Updates to HIPAA privacy policies and Notices of Privacy Practices to comply with new rules that came into force in September 2013
• Schedule of implementation and scope of changes
• Changes to be made to Breach notification policies
• What must be included in privacy notices under the updated rules
• New rights of individuals to restrict disclosure of information
• Changes with respect to fundraising activity and the NPP
• Re-evaluation of marketing activity by healthcare operations
• How you should update your policies and your NPP – how do you document them, to whom does the new NPP go, and how?

Who Will Benefit:

This webinar will provide valuable assistance to all personnel in medical offices, practice groups, hospitals, academic medical centers, insurers, business associates (shredding, data storage, systems vendors, billing services, etc.). The titles are:

• Compliance director
• CEO
• CFO
• Privacy Officer
• Security Officer
• Information Systems Manager
• HIPAA Officer
• Compliance Officer
• Chief Information Officer
• Health Information Manager
• Healthcare Counsel/lawyer
• Office Manager
• Contracts Manager

Instructor Profile:

Jim Sheldon-Dean, is the founder and director of compliance services at Lewis Creek Systems, LLC, a Vermont-based consulting firm founded in 1982, providing information privacy and security regulatory compliance services to a variety of health care providers, businesses, universities, small and large hospitals, urban and rural mental health and social service agencies, health insurance plans, and health care business associates. He serves on the HIMSS Information Systems Security Workgroup, co-chairs the Workgroup for Electronic Data Interchange Privacy and Security Workgroup, and co-chairs the WEDI HIPAA Updates and Privacy and Security Meaningful Use sub-workgroups. He is a frequent speaker regarding HIPAA and information privacy and security compliance issues at seminars and conferences, including speaking engagements at AHIMA national and regional conventions and WEDI national conferences, and before the New York Metropolitan Chapter of the Healthcare Financial Management Association, Health Information Management Associations of New York City, New York State, Virginia, and Vermont, the Connecticut Hospital Association, and the Hospital and Health System Association of Pennsylvania.