Why Us?

We know the law and we know the web.

We help companies safely and securely do business on the web.

HITECH / HIPAA Newsletter October 2013 Archive


HITECH Act Compliance is a Team Sport:  Is your team Omnibus Rule ready?

 October  2013 Issue No.  46
In this Issue
Products now available in the HSG Store
HIPAA 2.0: No More Fill in the Blanks Compliance!
HITECH Switch OnProducts now available in the HSG Store. 


HIPAA Breach Notification Framework 

Our HIPAA Breach Notification Framework walks you through the process of analyzing security incidents to determine what actions you must take to ensure your response complies with the HITECH Breach Notification requirements. The Framework discusses HITECH breach compliance in simple terms and uses twelve flowchart diagrams to help you navigate the process. It also includes tools and templates that help "jump start" your breach notification compliance initiative.

  

 Buy Now...  

  

 

Business Associate Agreement: a HITECH Ready Model Contract

Our model Business Associate Agreement includes provisions that meet the requirements of HIPAA/HITECH and is fully annotated with links to the relevant statutory/regulatory authority that underpins each Contract clause. The Contract package also includes a complete "User's Guide," with a clause-by-clause explanation of the issues addressed in the Contract. 

Buy Now...

The Security Rule Under HITECH:
a Business Associate Perspective
First Edition

The most important step for building a "good SR compliance story" is for the business associate to get started. The approach in The Security Rule Under HITECH is to build the story iteratively over time. Most business associates (large or small) will likely need help in creating the story. The framework discussed throughout this document provides a good road map to follow.

Buy Now...

HIPAA Core Training Combo

This package includes the Breach Notification Simplified Training Module, the HIPAA Privacy Rule under HITECH Training Module, the HIPAA Security Rule Under HITECH  Training Module and the HITECH and HIPAA Compliant  Training Module all in one Combo Package.  Buy all 4 for a little more than than the price of 3

 Buy Now...
Quick Links
Join Our Mailing List
Interested in staying current on HITECH / HIPAA compliance issues? Click the "join our list" link above and receive your own copy of the newsletter each month.

Other Resources
HIPAA Survival Guide Store Overview
HIPAA Survival Guide Store Overview

Cloud, Social Media, and Mobile Checklist Product Overview
Cloud, Social Media, and Mobile Checklist Product Overview
Business Associate Agreement Product Overview
Business Associate Agreement Product Overview
HIPAA / HITECH Core Training Product Overview
HIPAA / HITECH Core Training Product Overview
Privacy Rule Checklist Product Overview
Privacy Rule Checklist Product Overview
Breach Notification Framework Product Overview
Breach Notification Framework Product Overview

HSG Logo 
 
Dear Carlos,

Welcome to our October 2013 HITECH / HIPAA Compliance Newsletter.  

 

Our article this month is entitled:  HIPAA 2.0: No More Fill in the Blanks Compliance! 

 

The September 23, 2013 Omnibus Rule deadline has come and gone, but no worries because many of you have filled in the blanks of your new set of templates and are good to go. Right? Wrong!  

 

First, it is likely that many of you don't understand the templates that you have carefully modified with your organization's "name, rank, and serial number." Second, the vast  majority of you probably don't have any organizational processes in place to under pin your policies (i.e. your templates). And finally, almost no one has effective tracking mechanisms in place to track process results. In short, your organization may be a long ways from being able to show visible, demonstrable, evidence of compliance. 

 

FREE Breach Notification Webinar

 

Webinar Description

 

This Webinar will provide a detailed summary of the final Breach Notification Rule as modified by the Omnibus Rule. Breach notification is the 800 pound gorilla that will continue to feast at the "it won't happen here" table. 

 

Date/Time

 

Thursday, October 10, 2013 2:00 PM - 3:30 PM EDT

 

Registration

 

Click here to register.

 

Only five hundred (500) seats are available so login in early if you want to attend.

 

HSG Subscription Plan Front Cover We are pleased to announce Release 1.0 of our Subscription Service which is available for purchase in our new HIPAA Survival Guide Store along with our suite of Omnibus Rule Ready™ products. Our product suite has been updated to reflect Omnibus Rule modifications.

 

Our Subscription Service and products provide policies, processes, and tracking mechanisms to help covered entities and business associates deliver visible, demonstrable evidence of HIPAA compliance. The HIPAA Rules tell you what is required in order to comply; our Products provide best practice step-by-step guidance to help you meet your compliance objectives.

HSG Announcements
Webtones PointerIn addition to our commercial-off-the-shelf training products, we now offer training customized for your organization through our partnership with the Digital Business Law Group. We recognize that some organizations, including business associates, have a need for HIPAA / HITECH training tailored to their specific needs (click here or on the image below to get more information).
 
HIPAA Training  

 

Join the Conversation
The HIPAA Survival Group on LinkedIn continues to be the go to place for meaningful discussion of HITECH / HIPAA issues. You will find many industry thought leaders and insiders sharing their views on the evolving compliance landscape. 

Stay Connected
Want to stay updated throughout the month? Follow Carlos on Twitter by clicking on the badge below.  If you would like to read more regarding the authors' views on HIT and compliance click here and here and subscribe to their blogs.  
Twitter

Become a Fan
Follow us on FaceBook by becoming a fan of the HIPAA Survival Guide. Also, be sure to check out our HITECH Videos.



Main_Article HIPAA 2.0: No More Fill in the Blanks Compliance!
Webtones Pointer  
The September 23, 2013 Omnibus Rule deadline has come and gone, but no worries because many of you have filled in the blanks of your new set of templates and are good to go. Right? Wrong!  


First, it is likely that many of you don't understand the templates that you have carefully modified with your organization's "name, rank, and serial number." Second, the vast  majority of you probably don't have any organizational processes in place to under pin your policies (i.e. your templates). And finally, almost no one has effective tracking mechanisms in place to track process results. In short, your organization may be a long ways from being able to show visible, demonstrable, evidence of compliance.

 

Perhaps if we were still living in the old HIPAA universe where HIPAA was a paper tiger and the dirty little secret in the healthcare industry was that everyone knew that it wasn't enforced; perhaps then you would be just fine with a new set of templates. That world was shattered when the HITECH Act was signed into law in February 2009. It completely exploded and became unrecognizable on September 23, 2013. For those of you that are just now joining us, I have a news flash for you: this ain't your daddy's HIPAA anymore!  

 

Of course, you old timers already know that HIPAA 2.0 is "a horse of a different color" and that is why many of you have continued to read these compliance rants over the last four years. So this article will be a short walk down memory lane, and then a discussion about where we are headed.  

 

Going forward we assume that you understand that the status quo will only lead to a finding of willful neglect, and that you want to avoid that at all cost. Therefore, we are going to cover specific topics in detail that help you "jumpstart" a compliance program that has a reasonable chance of succeeding.  

HITECH / HIPAA NewsletterGround Already Covered


There are many reasons to review our Newsletter Archives but here we will highlight just a few:

 

This is not an exhaustive list of articles, we simply wanted to provide a "quick index" if you are trying to get caught up. 

  

Key Contract Sections Further Down the Road? 

 

Going forward this newsletter will focus on a more detailed "birds eye" view of the HIPAA regulations as most of you continue to build a good compliance story. We will usually write about topics that our Webinars indicate our audience is struggling with. In this week's article we look at the "out of pocket" restriction that is now mandatory under the Omnibus Rule. 

 

About Us
HITECH Puzzles3Lions Publishing, Inc. is now the owner/operator of the HIPAA Survival Guide website and the official sponsor of this newsletter. Our mission is to bring you HITECH / HIPAA statutes and regulations in an easy to read and digestible format, products that help reduce the burden of compliance, and "news you can use" via our newsletter.

We take a partnering and collaborative approach to the marketplace. If you would like to see specific topics covered in this newsletter, or additional products, then please let us know.


Carlos Leyva, CEO
3Lions Publishing, Inc.
(800) 516-7903

 
 

Contact us today

CLICK HERE!