HIPAA Compliance with Information Technology in Alcohol Drug Treatment / Mental Health Industry

Full HIPAA Law can be downloaded here.

What is HIPAA – Health Insurance Portability and Accountability Act

The HIPAA Privacy Rule provides federal protections for personal health information held by covered entities and gives patients an array of rights with respect to that information. At the same time, the Privacy Rule is balanced so that it permits the disclosure of personal health information needed for patient care and other important purposes.

The Security Rule specifies a series of administrative, physical, and technical safeguards for covered entities to use to assure the confidentiality, integrity, and availability of electronic protected health information.

Within the Security Rule, MyNew Technologies can assist and develop processes which will deploy your website with HIPAA compliancy. Below are the main targeted points for compliancy in Information Technology Systems used by health providers.

1. Has your organization completed a Security Evaluation on the information systems used in conjunction with maintaining your current and future Protected Health Information?

2. Does your organization have virus checking software, firewalls and operating systems that provide encryption and other security measures?

3. Does your organization perform back-ups of your data daily?

4. Does your organization have a Disaster Recovery and Contingency Plan to meet the HIPAA Security Standards?

5. Has you organization developed security policies and procedures with regard to confidentiality statements, individually identifying information system users, passwords, automatic logoff, acceptable use, e-mail, internet usage, authentication of workstations, monitoring and documenting unauthorized access, audit trails of users, sanctions for misuse or disclosure and termination checklists?

6. Has your organization provided for the overall physical security of your information systems, facility, staff, and medical records?

7. Has your organization developed job descriptions for HIPAA required positions and all other positions in your organization?