PRO+ Premium Content/Information Security magazine

Thank you for joining!
Access your Pro+ Content below.
February 2007

HIPAA privacy records and guidelines: How to achieve compliance

HIPAA Bridgework While we may argue the dental status of HIPAA ("HIPAA-ocricy," December 2006), good security practices in a health care environment equate to good business practices. Yes, HIPAA can be overbearing, but it can be used as a guideline for what is expected in an environment expected to be secure, if not by federal law, then at least by the patient community. To have a chief physician boast that his doctors don't believe in password security, that one doctor logs in for all the others, is unbelievable in this litigious society. Without password security, anybody who has access to the computer workstation--doctor, nurse, housekeeper or visitor--has the ability to change patient information in a medical chart without detection or tracking. This does not make for good medicine nor good business. What happens when an untoward medical outcome brings an investigation? Are you going to take the witness stand and say: "It might be my diagnosis, but maybe someone changed it. Someone might have altered the meds, I don't know. ...

Access this PRO+ Content for Free!

By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.

You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

Features in this issue

  • Going Global

    Organizations sending data abroad must be prepared to comply with a slew of privacy and security regulations.

Columns in this issue