Most healthcare providers automatically think about privacy issues when the HIPAA law comes to mind and seem to have gone on 'auto-pilot' when it comes to protecting privacy.  It's not uncommon to see offices being mindful of the visibility of computer screens and paper medical records.  They are generally careful not to leave PHI face-up in high-traffic areas, they limit 'hallway conferences' about patients, and some have even gone a little overboard, removing patient names from files and sign-in systems.

However, because of the benefits (financial, operational and quality of care) and proliferation of electronic mechanisms for receiving, creating, maintaining and transmitting PHI, the need for additional and specific protection is very great.  In addition, the growing use of wireless networks and mobile devices, such as laptops, smartphones and tablets which allow providers to access PHI, mandates a whole host of other security processes that cannot be ignored.

The HIPAA Privacy Rule does contain some basic security provisions, and its guidelines cover all types of PHI, but a great number of providers don't realize that a separate and more complex HIPAA Security Rule added specific provisions for protecting the confidentiality, integrity and availability of electronic PHI.

Click HERE to read more.