Description: It has been 23 years since the Kennedy/Kassebaum bill, signed into law on August 21, 1996 and morphed into the Health Insurance Portability and Availability Act. While HIPAA was initially intended to increase the portability and availability of health insurance coverage for employees between jobs, it also addressed patient privacy (April 2003) and security measures (April 2005) to protect patient data. Additions to the law/regulations have included the Enforcement Rule (March 2006), Breach Notification Rule (September 2009), Compliance Audit Programs (2011/2012) and the Final Omnibus Bill (March 2013) which mandated specific encryption technologies to use.

One would think that with this amount of legislative direction and auditing oversight that patient records were never safer. However, the opposite is true. Many of the HIPAA changes have in fact made patient records more, not less, vulnerable to unauthorized exposure. This, coupled with advancements in technology, have made our health data more vulnerable than any other time in history. In this presentation, we will review what has driven this unintended consequence and what organizations need to do to better protect patient data.

Webinar Date: This was presented as part of OHIMA's 2020 Virtual Conference - March 17, 2020
Duration: 1 hour

Speaker:  Tom Skoog, CISA, CISSP is the IT Risk & Advisory practice leader at Blue & Co. He has over 30 years of experience providing IT risk management services in a variety of industries including healthcare. He previously served as a partner at one of the Big 4 accounting firms, where he was responsible for the IT risk and audit practice for the Great Lakes business unit. There, Tom was responsible for delivering both external and internal audit services along with other consulting projects including cyber security, business resiliency, strategy development, project management, and helping clients comply with a variety of regulatory requirements including Sarbanes-Oxley, PCI, and HIPAA. Tom was a member of the national HIPAA services team, which was responsible for working with HHS/CMS on the development of the initial audit protocols used by CMS in assessing HIPAA compliance. The team also conducted the initial 100+ audits and used the results to adjust the audit protocols with CMS officials.

Click here to register for this webinar!

Cost: $25 Members / $35 Non-Members
1 AHIMA CEU*
Domain: Data Structure, Content and Information Governance

*AHIMA CEUs are also accepted by the AAPC! Check eligibility on the AAPC website.