For Physicians. By Physicians.™
For Physicians. By Physicians.™
The HIPAA and HITECH acts both place on healthcare providers the legal obligation to safeguard the privacy and security of health information. However, major differences exist between them. Health Insurance Portability and Accountability Act of 1996 (HIPAA) established a national set of security standards for protecting certain health information that is held or transferred in electronic form. This act covered everything from telephone message to authorization for release of protected health information (PHI). Before 1996, no national standards existed.
The Health Information Technology for Economic and Clinical Health Act (HITECH) is part of the American Recovery and Reinvestment Act of 2009 (ARRA). ARRA contains incentives related to health care information technology in general (e.g. creation of a national health care infrastructure) and to the need to accelerate the adoption of electronic health record (EHR) systems among providers. With the advance of technology and greater activity by those who exploit technology for illegal purposes, more oversight for privacy protection was needed.
There was concern that HIPAA compliance was not being rigorously enforced in the past. Therefore, under HITECH, mandatory penalties will be imposed for “willful neglect.” Generally, willful neglect occurs when a provider has no story or such a wavering story regarding compliance that it reflects a cavalier attitude. In addition, those affected by privacy breaches must be notified. This notice was not required under HIPAA.
Challenges in HIPAA compliance exist because current security requirements, taken independently of one another, can prove costly and time-consuming to implement adequately. Unstructured data such as credit card data or social security numbers must be protected. Lastly, access to electronic PHI must be limited to authorized persons only, whether it is the user or the recipient.
HHS Summary of the HIPAA Security Rule
HHS Omnibus HIPAA Rulemaking | HITECH
Take a post-test and get CME credits
Please log in to ObGFirst to access this page
OBG Project CME requires a modern web browser (Internet Explorer 10+, Mozilla Firefox, Apple Safari, Google Chrome, Microsoft Edge). Certain educational activities may require additional software to view multimedia, presentation, or printable versions of their content. These activities will be marked as such and will provide links to the required software. That software may be: Adobe Flash, Apple QuickTime, Adobe Acrobat, Microsoft PowerPoint, Windows Media Player, or Real Networks Real One Player.
This educational activity may contain discussion of published and/or investigational uses of agents that are not indicated by the FDA. The planners of this activity do not recommend the use of any agent outside of the labeled indications.
The opinions expressed in the educational activity are those of the faculty and do not necessarily represent the views of the planners. Please refer to the official prescribing information for each product for discussion of approved indications, contraindications, and warnings.
Participants have an implied responsibility to use the newly acquired information to enhance patient outcomes and their own professional development. The information
presented in this activity is not meant to serve as a guideline for patient management. Any procedures, medications, or other courses of diagnosis or treatment discussed or suggested in this activity should not be used by clinicians without evaluation of their patient’s conditions and possible contraindications and/or dangers in use, review of any applicable manufacturer’s product information, and comparison with recommendations of other authorities.
Jointly provided by
