In: Operations Management
"Information Technology" Please respond to the following:
Why is the Health Insurance Portability and Accountability Act (HIPAA) regarding confidentiality of patient information important?
Give examples of steps HCOs can take to ensure HIPAA is regarded and PHI is secure?
What protocols have been put in place to ensure that PHI is protected with use of electronic medical/health records?
Referring to a health care organization with which you are familiar, describe some of the most prevalent challenges it might have faced in implementing its electronic medical / health record system.
1. HIPAA is very crucial in protecting the patients' data against data theft, breach and its potential misuse. It also enables the patient to designate an individual to represent him / her on his / her behalf. It may also enable private entities to manage the data on patient's behalf. The act makes it mandatory for all organizations engaged in using, maintaining, storing and transmitting the patient data to comply with the regulations of HIPAA. The organization in turn save the cost of breach of the data, by maintaining the stringent compliance.
2. The protocols for avoiding the violation of HIPAA are as given below.
(a) Being proactive in assessing and mitigating risks of data security.
(b) Use of cutting age cyber security techniques to protect the data from being hacked by cyber criminals.
(c) Providing training to employee in maintaining anti breach measures as per pre defined plan.
(d) Being insured for cyber attacks and its after effects.
(e) Business associate agreements for preventing the data breach through vulnerable associates.
3. Challenges in implementing the EHR systems.
(a) Compatibility with the existing infrastructure and resources of the company.
(b) Training of the all levels of employees in managing new techniques.
(c) Devising and implementing the cyber security measures.
(d) Change management with employees, customers and others.
(e) Knowing regulations and ensuring complaince with them.
(f) Convincing the buy in of the concept with management and staff.