New HIPAA Rules, Tools, and Guidance - Latest Changes and What to Expect Next

This HIPAA compliance training will focus on the privacy and security policies and Notices of Privacy Practices that must be updated to ensure compliance with the final HIPAA Omnibus rule. It will also discuss the new recommendations for accounting of disclosures regulations and the HIPAA audit program.

Why Should You Attend:

The HIPAA rules for Privacy, Security, and Breach Notification were updated last year in the Omnibus Update and are now in effect, containing numerous changes based, for the most part, on The HITECH Act passed in 2009. Some of the most significant changes have to do with changes to individual rights under HIPAA that require changes in policies and procedures and must be properly noted in your forms and notices.

This webinar will review the new regulations and will discuss their effects on HIPAA policies. Every HIPAA Covered Entity is required to have a Notice of Privacy Practices that accurately reflects patient rights and practices at the entity. Because there are new finalized changes to the HIPAA rules, the NPP for every organization having one must be updated. This webinar will examine the new templates provided by the US Department of Health and Human Services and show how they can be used to improve your notice and make it compliant with the new rules, available in English and Spanish.

Accounting of disclosures regulations pursuant to the HITECH Act have been proposed but not finalized, due to heavy criticism of the proposed rule. New recommendations have been made that are reasonable, implementable, and meet the needs of individuals and the law well, while minimizing the regulatory burden. It will discuss the recommendations that are likely to see their way into new rules in 2014.

The HIPAA Audit program required by the HITECH Act is coming to life again in 2014, with a review that may encompass ten times the number of entities reviewed in 2012. The new program will be discussed. The work that must be done for updating HIPAA compliance will outlined, with a to-do list of activities that must be undertaken to ensure compliance, and identification of additional resources and templates.

Areas Covered in the Webinar:

• Updates to HIPAA privacy policies and Notices of Privacy Practices to comply with new rules that came into force in September 2013
• Schedule of implementation and scope of changes
• Updates to Breach notification policies
• New rights of individuals to restrict disclosure of information
• Re-evaluation of marketing activity by healthcare operations
• Templates for notices and agreements will be identified and guidance for implementation of the new rules will be discussed.
• New recommendations for accounting of disclosures regulations
• Audit preparation methods

Who Will Benefit:

This webinar will provide valuable assistance to all personnel in medical offices, practice groups, hospitals, academic medical centers, insurers, business associates (shredding, data storage, systems vendors, billing services, etc.). The titles are

• Compliance director
• CEO
• CFO
• Privacy Officer
• Security Officer
• Information Systems Manager
• HIPAA Officer
• Compliance Officer
• Chief Information Officer
• Health Information Manager
• Healthcare Counsel/lawyer
• Office Manager
• Contracts Manager

Instructor Profile:

Jim Sheldon-Dean, is the founder and director of compliance services at Lewis Creek Systems, LLC, a Vermont-based consulting firm founded in 1982, providing information privacy and security regulatory compliance services to a variety of health care providers, businesses, universities, small and large hospitals, urban and rural mental health and social service agencies, health insurance plans, and health care business associates. He serves on the HIMSS Information Systems Security Workgroup, co-chairs the Workgroup for Electronic Data Interchange Privacy and Security Workgroup, and co-chairs the WEDI HIPAA Updates and Privacy and Security Meaningful Use sub-workgroups. He is a frequent speaker regarding HIPAA and information privacy and security compliance issues at seminars and conferences, including speaking engagements at AHIMA national and regional conventions and WEDI national conferences, and before the New York Metropolitan Chapter of the Healthcare Financial Management Association, Health Information Management Associations of New York City, New York State, Virginia, and Vermont, the Connecticut Hospital Association, and the Hospital and Health System Association of Pennsylvania.