Understanding HIPAA Risk Mitigation

Why Should You Attend:

HIPAA is about mitigating the risk of a potential breach of patient health information maintained by your organization. Understanding risk begins with compliance of HIPAA Security and Privacy rules. This involves not only ensuring you have the appropriate administrative, technical, and physical safeguards in place, but you also have the proper policies and procedures in place that cover implementation specifications. Find out if your organization has the proper procedures in place for patient privacy rights and controls on your uses and disclosures of protected health information. If audited or the subject of a compliance review you will be required to show the government you have all the necessary policy and procedure documentation in place to address all the required safeguards.

Attendees will leave the course clearly understanding all the requirements that must be in place for the HIPAA Security Rule and how to demonstrate compliance with all the required and addressable safeguards. After completing this course, a Covered Entity or Business Associate will be able to know what needs to be place when it comes to all of the HIPAA regulations.

Learning Objectives:

• Understand the requirements of the HIPAA Security and Privacy rules
• Learn what requirements must be in place for a HIPAA compliance Program
• Understand what administrative, technical and physical safeguards are
• Learn how to mitigate risks and vulnerabilities
• Understand what HIPAA policies and procedures need to be in place
• Understand how to demonstrate and explain your HIPAA compliance program
• Understand why a HIPAA risk assessment must be conducted
• Look at case examples of HIPAA breaches and learn how to avoid them
• Learn how to create a culture of compliance within your organization

Areas Covered in the Webinar:

• Why was HIPAA created?
• What are risks and vulnerabilities?
• What are the HIPAA Security and Privacy rules?
• What is a HIPAA risk management plan?
• What is meant by “Required” and “Addressable” implementation specifications?
• What are administrative, technical, and physical safeguards requirements?
• Why must a HIPAA risk assessment be conducted?
• Steps to mitigate risk.
• What are HIPAA training requirements?
• How to demonstrate compliance?
• What is a HIPAA data breach and what happens if it occurs?
• What are the penalties and fines for non-compliance and how to avoid them?
• Learning from mistakes organizations have made
• Q&A

Who Will Benefit:

• Compliance Officer
• HIPAA Privacy Officer
• HIPAA Security Officer
• Medical/Dental Office Managers
• Practice Managers
• Information Systems Manager
• Chief Information Officer
• General Counsel/Lawyer
• Practice Management Consultants
• Any Business Associates that Access Protected Health Information
• IT Companies that Support Medical/Dental Practices or other Healthcare Organizations

Jay Hodes
President, Colington Consulting HIPAA Compliance Services

Jay Hodes is a leading expert in HIPAA compliance and President of Colington Consulting. His company provides HIPAA consulting services for healthcare providers and business associates. Mr. Hodes has over 30 years of combined experience in risk assessments, site security evaluation, regulatory compliance, policy and procedures assessments, and Federal law enforcement management. He is the former Assistant Inspector General for Investigations at the U.S. Department of Health and Human Services.

Mr. Hodes has been the keynote speaker and provided presentations regarding HIPAA compliance and patient privacy to many professional healthcare organizations. He has published over 40 educational articles regarding HIPAA compliance, been featured in Part B News articles, the Report on Patient Privacy, provided a guest post in the Electronic Health Reporter, interviewed and provided comments to Hospital Access Management regarding HIPAA privacy issues resulting from the Orlando mass shooting incident, and interviewed twice by Renal & Urology News and the Virtru.com blog regarding HIPAA requirements and safeguards, and interviewed by PracticeSuite EMR as part of their Expert Interview Series.

Mr. Hodes is a member of the American Institute of Healthcare Compliance, Health Care Compliance Association, Healthcare Information and Management Systems Society, American Society for Industrial Security, the Practice Management Association of Northern Virginia, Health Technology Forum- Washington, DC, and the Health and Medical Technology Innovation Roundtable at George Mason University. Mr. Hodes is certified by the New Jersey Board of Dentistry and the Maryland State Board of Dental Examiners to provide continuing education classes in HIPAA compliance.

In his free time, Mr. Hodes is a volunteer for Lab Rescue of the Labrador Retriever Club of the Potomac and the non-profit organization, Outer Banks (NC) Sporting Events.

Follow us :