Overview:

This session is designed to provide intensive training in HIPAA Privacy Rule compliance designed for both the seasoned HIPAA professional as well as the individual newly appointed to the position of HIPAA Privacy Officer.

The session begins with overview of the HIPAA regulations and then continues with presentation of the specifics of the Privacy Rule, such as Individual Rights and Uses & Disclosures, and recent and expected changes to HIPAA and other rules such as 42 CFR Part 2 regarding Substance Use Disorder information, including the impacts of required changes in your practices to meet the rules.

The discussion will include special considerations for circumstances such as the COVID-19 pandemic and sharing of information for public health purposes.

Topics include:

• The foundations of HIPAA and how they relate to the issues of today
• Privacy, Security, and Breach Notification under HIPAA
• Changes in Rules, Technologies, and Practices that Impact HIPAA Compliance
• Patient Rights and Controls on Uses and Disclosures
• Managing Patient Communication Rights, Texting, and Telemedicine
• Considerations for Circumstances Such As Declared Emergencies
• New Guidance, Court Decisions, and Other Regulations Related to Personal Information
• Challenges with New Issues, such as Insecure Communications and Ransomware
• Interactions with the SAMHSA 42 CFR Part 2 regulations on Information Relating to Substance Use Disorders
• Security Breaches and Ways to Prevent and Respond To Them
• Numerous references and sample documents will be provided

• Understanding the variety of forms entities can take under HIPAA and how they relate to one another
• Learning about the roles of HIPAA Business Associates and obligations for their management
• Learning about patient rights, such as access and amendment of information, and how such rights are protected and enforced under HIPAA
• How uses and disclosures may take place in a wide variety of circumstances, including such hot topics as sharing information with the family and friends of a patient
• How the rules support emergency responses and how they may be applied in declared emergencies
• What is current enforcement and audit activity, including an emphasis on patient access of information
• Using new communications technologies such as texting and telemedicine according to the rules
• Learn about new and upcoming changes to Substance Use Disorder records confidentiality under 42 CFR Part 2
• Ensuring individuals have adequate access of their information under the rules
• The place of Information Security and incident management under the HIPAA Security and Breach Notification Rules
• Processes to be used in managing security, mitigating risks, and handling incidents
• Proper methods of documentation and training to ensure compliance and help avoid penalties
• The use of internal audits and drills to improve compliance continuously and be prepared for incidents and enforcement investigations

• Overview of HIPAA Privacy, Security, and Breach Notification Regulations
• Types of Entities
• Entity Relationships
• Business Associates, including Guidance on Compliance Liabilities
• Current Issues in HIPAA, including Responding to Emergencies
• HIPAA Privacy Rule and Patient Rights
• The Designated Record Set
• Access
• Amendment
• Restrictions
• Communications, including Texting and Telemedicine
• HIPAA Privacy Rule and Uses and Disclosures of PHI
• Using Protected Health Information
• Disclosures to family and friends, including During Emergencies
• Disclosures to providers, care coordinators, etc.
• Disclosures to attorneys, the Attorney General’s office, etc., minors and guardian issues
• Day-to-day disclosures
• Training and Documentation Requirements

• Current Hot Topics in HIPAA and Privacy
• Emergencies and HIPAA
• Enforcement and Audits, including When They May Be Suspended
• Coordination with 42 CFR Part 2 and Substance Use Disorder information
• Access of Information, including Rules on Data Blocking and Enforcement
• HIPAA Security and Breach Notification Rule Principles
• How the Privacy, Security, and Breach Rules Work Together
• Security Safeguards and The Role of Risk Analysis
• Determining What Is a Breach and What Must Be Reported
• Incident Management and Breach Reporting
• Documentation, Training, Drills and Self-Audits
• The 10-Day HIPAA Compliance Plan
• How to Organize and Use Documentation to Your Advantage
• Training Methods and Compliance Improvement
• Conducting Drills in Incident Response
• Using the HIPAA Audit Protocol for Documentation

• CEO
• HIPAA Privacy Officers
• HIPAA Security Officers
• Information Security Officers
• Risk Managers
• Compliance Officers
• Privacy Officers
• Health Information Managers
• Information Technology Managers
• Information Systems Managers
• Medical Office Managers
• Chief Financial Officers
• Systems Managers
• Chief Information Officer
• Healthcare Counsel/lawyer
• Operations Directors