Managing Risk through PHI Mapping: Do You Know Where Your Data Is

Registration Process: 8:30 AM – 9:00 AM

Session Start Time: 9:00 AM

Introduction to PHI Mapping and Why it is More Important than Ever

• PHI as an asset to healthcare organizations
• PHI concepts and definitions
• The value of PHI in patient care, research, and education
• PHI and data analytics: the new paradigm

Factors Affecting the Importance of PHI Mapping

• Data analytics and big data in healthcare
• How healthcare regulatory reforms are affecting information assets in healthcare
• Implications of Health Information Exchange (HIE)
• mHealth impacts and scenarios

Key Factors in Selecting and Implementing PHI Strategies (Part I)

• Governance
• Program planning, goals and objectives, and policies
• Documentation policies, practices and procedures
• Data identification and classification
• Vendor selection for automated DLD/DLP tools and outsourcing scenarios

Key Factors in Selecting and Implementing PHI Strategies (Part II)

• Implementation do’s and don’ts
• Training and awareness strategies and approaches
• Metrics: how to measure results
• Program evaluation and ongoing enhancement
• PHI mapping as the foundation for identifying and managing risk

PHI Mapping: Methods and Tools

• The data life cycle of PHI
• Where PHI resides and how to identify it
• Why use tools? What they can do for you.
• Overview of tools available for PHI mapping
• Surveys and interviews: methods, techniques and strategies

PHI Approaches and Tools Selection

• Automated and non-automated methods of identifying and classifying PHI
• How to evaluate tools to find the best solution for your organization
• Tool selection, implementation and management
• mpact of PHI mapping on infrastructure and operations

PHI Mapping: A Model for Managing Risk and Facilitating Regulatory Compliance

• Changing risk factors and regulatory considerations
• PHI mapping as on ongoing program: evaluation, change and management
• How to measure benefits of PHI mapping and the impact on information security and privacy programs.

Phyllis Patrick is Founder and President of Phyllis A. Patrick & Associates LLC, a consulting group specializing in providing strategic planning, security, and privacy services to the health care industry. The company’s practical approach to security and privacy is reflected in its diversity of clients, which include academic medical centers, community hospitals, physician groups, vendors and business associates, health information exchanges, and pharmaceutical companies.

In addition to serving as Vice President, Planning and as Administrator for laboratory services for a health system in California, Ms. Patrick has held senior positions in security, privacy, and compliance at major academic medical centers in New York. She was named the first Information Security Officer at the Mount Sinai Medical Center in Manhattan. As Vice President and Chief Compliance Officer at the Hospital for Special Surgery, she created and directed the organization’s Compliance Program, which included the Privacy and Security Programs.

As a consultant to Strategies for Tomorrow, a company known for its expertise in Health Information Exchange (HIE) development, Ms. Patrick has led Privacy and Security initiatives for HealtHIE Nevada, Indiana Health Information Technology, Inc. (IHIT), and HealthBridge.

Ms. Patrick is a member of the Privacy and Security Work Group for the North Carolina Healthcare Information and Communications Alliance, Inc. (NCHICA) and a Board member of the New England Healthcare Internal Auditors (NEHIA). A long-time member of the Greater New York Hospital Association (GNYHA), she was a founding member of GNYHA’s Security Work Group and a contributing member of the Compliance Work Group.

A member of the Editorial Advisory Board for HCPro’s Briefings on HIPAA, Ms. Patrick is also member of the GRC Advisory Board for Wolters Kluwer Law & Business. In 2013 she was appointed to the Ponemon Institute’s RIM Council, a select group of privacy, security and information management leaders from multinational corporations who are champions within their various industries on issues involving privacy and data protection. She served on the Board of Examiners for the Malcolm Baldrige National Quality Awards 2006 - 2009.

She is a frequent speaker at national and regional conferences and professional associations, including the HIPAA Summit, AMC Privacy and Security conferences, Health Care Financial Management Association (HFMA), the Association of Healthcare Internal Auditors (AHIA), and others. She is frequently quoted in healthcare publications. She is the author of The Complete Guide to Healthcare Privacy and Information Security Governance.

Ms. Patrick received her B.S. in Psychology from the Pennsylvania State University and her M.B.A. in Health Care Administration from Cornell University. She is a Fellow in the American College of Healthcare Executives and is certified in healthcare compliance and information security management.