Purchase Options

HIPAA law applies to Business Associates in healthcare – BAs are organizations that create, receive, maintain or transmit Protected Health Information (PHI) – on behalf of a Covered Entity or to provide a service or function involving PHI for a covered Entity – and are directly liable for compliance with HIPAA law protecting the privacy and security of PHI.

Objectives of the Presentation

• Management responsibility
• Guide to Risk Analysis – Risk Management
• Security Rule and Privacy Rule are interconnected – Policies Required for both
• How to deal with Potential Breaches
• Understand the Business Associate Agreement (BAA) and the Subcontractor BAA

Why Should you Attend
If you are a Business Associate you must know exactly what you have to do to comply with HIPAA. But you have two hurdles.

First, your HIPAA responsibilities are new so you don’t have the HIPAA compliance background and experience of your customers – Covered Entities.

Second, you are liable for compliance with the entire HIPAA Security Rule – and parts of the HIPAA Privacy and Breach Notification Rules. But at first, second and third glance it is difficult to find your Privacy and Breach Notification Rule obligations and no one is in charge! HIPAA only directs you to identify a Security Official to develop and implement Security Rule Policies and Procedures. It gives you no direction at all about developing Your Privacy and Breach Notification Rule compliance program.

This session will explain Business Associate HIPAA compliance responsibilities in 5 steps.

There is a secret to Business Associate HIPAA compliance. The secret is – HIPAA Rules are easy to follow, step-by-step – when you know the steps.

Areas Covered
This webinar for HIPAA Business Associates will cover HIPAA law that applies to Business Associates and the top HIPAA Compliance Priorities, broken into 5 steps needed for full HIPAA compliance:
1. The HIPAA Compliance Official
Who’s in charge? – All HIPAA compliance responsibility rests squarely with top management. But authority to develop and implement a HIPAA compliance program is delegated to one or more Business Associate HIPAA Compliance Official(s). They must do more than just develop and implement Security Rule Policies and Procedures. Business Associate HIPAA Compliance Official’s duties are a roadmap to develop, implement and maintain a Business Associate’s HIPAA Compliance Program
2. Risk Analysis and Risk Management – the basis of HIPAA Compliance broken down into its 3 basic parts and explained step-by-step
3. Understand and implement the interconnected Business Associate Security Rule and Privacy Rule Compliance responsibilities with appropriate Policies and Procedures
4. Learn how to investigate, assess and document Potential Breaches and if necessary, make notifications required by the Breach Notification Rule
5. Understand Business Associate Agreements with a Covered Entity and a Subcontractor Business Associate. Write your own Business Associate Agreement, recognize red flags, and avoid making your Subcontractor Business Associate your agent under the Federal Common Law of Agency by mistake

Who will Benefit

• C-Suite Executives
• Compliance Official
• Chief Information Security Officer
• Risk Management Director
• HIPAA Compliance Official
• HIPAA Privacy Officer
• HIPAA Security Officer
• Information Technology Supervisor
• Healthcare Marketing Manager
• General Counsel
• Attorney
• Certified Public Accountant

Instructor Profile:

Purchase Options

This webinar provides the guidance needed to use Web Sites and Social Media in healthcare and stay compliant with HIPAA. The HIPAA Rules, HHS/OCR guidance, Resolution Agreements provide a simple, easy to use blueprint using your Web Site and Social Media to engage patients and comply with HIPAA.

Objectives of the Presentation

• A clear explanation of the HIPAA Rules that apply to Health Care Provider Web Sites and Social Media like your practice’s Facebook page
• What to do – and not do – about Patient Reviews
• How to keep your Web Site and Social Media dynamic, effective and follow simple HIPAA Rules
• HIPAA Rules for Web Sites, Social Media and Patient Reviews are clear, unequivocal and easy to follow. It only takes one look at a Health Care Provider’s Web Site or Social Media page to find violations
• What to look for on your Web Site or Social Media site – how to identify violations – and how to fix them
• How to use advice from marketing professionals in a way that complies with HIPAA. Remember it is the Covered Entity who is responsible for HIPAA compliance – and liable for violations

Why Should you Attend
The HIPAA Rules, HHS/OCR guidance and settlements reached by OCR following investigations of violations provide a simple, easy to use blueprint for engaging patients and attracting new patients while avoiding HIPAA violations and liability.

This session will explain the HIPAA Rules for Web Sites, Social Media and Patient Reviews – how you can do what you want to do and comply with HIPAA. HIPAA Rules are easy to follow, step-by-step – when you know the steps.

Who will Benefit

• HIPAA Compliance Official
• HIPAA Privacy Officer
• HIPAA Security Officer
• Health Information Technology Supervisor
• Practice Manager
• Risk Manager
• Dentist
• Optometrist
• Chiropractor
• Physical Therapist
• Podiatrist
• Hospital Trustees
• C-Suite Executives

Topic Background
Patient Engagement is a cornerstone of quality patient care and, along with New Patient Attraction keeps your practice strong and helps it grow. Health care provider Web Sites and Social Media Web Sites like Facebook are essential to engage patients and attract new patients of all ages from Millennials to senior citizens. Provider Web Sites and Social Media pages are inexpensive, easy to build and universal today.

A 2018 survey found 72% of respondents use Patient Reviews posted on the Internet to choose a new provider, up from 25% in 2013.

However, Patient Engagement and New Patient Attraction through Web Sites, Social Media and Patient Reviews are covered by HIPAA Rules. The rules are easy to follow when you know what they are – but highly visible violations are widespread on the Internet.

Instructor Profile: