Seminar on HIPAA 2019 | HIPAA Security Risk Assessment | What’s new?

Description:

This two-day seminar will get into the fine details of what we need to do and how to do it.

We will go point by point through the entire HIPAA Security Rule and uncover simple methods to comply and create policy.

The primary goal is to ensure everyone is well educated on what is myth and what is reality with this law, there is so much misleading information all over regarding the do’s and don’ts with HIPAA – I want to add clarity for compliance officers

It will also address major changes under the Omnibus Rule and any other applicable updates for 2018.

Why you Should attend:

Join me in this two day seminar to explore what’s new with HIPAA both from a regulation standpoint (new requirements) and an enforcement standpoint

Omnibus has changed the HIPAA landscape for good!

Do you know all of the requirements of this enigmatic law?

Are you abiding by them?

My goal is to make this extremely complex enigma known as “HIPAA” very easy to understand with a painless step by step approach to an otherwise harrowing task… Times have changed and new laws are now in place concerning protected health information. The best way to protect your practice or business and save yourself future headaches and possible litigation or Federal fines is to be proactive instead of reactive

This once rarely enforced law has changed and you need to know what’s going on!

Protect your practice or business!

 

Areas Covered in the Session:

Study all 18 Standards and 44 Implementation Specifications of the regulations

Updates for 2019

Requirements of Compliance Officers

New definition of what constitutes protected health information

Real life litigated cases

BYOD

Portable devices

Business associates and the increased burden

Emailing of PHI

Texting of PHI

Federal Audit Process

HIPAA and suing – how this works

Risk Assessment

Who Will Benefit:

Practice managers

Any business associates who work with medical practices or hospitals (i.e. billing companies, transcription companies, IT companies, answering services, home health, coders, attorneys, etc)

MD’s and other medical professionals

Agenda:

Day 1 Schedule

Lecture 1:

HIPAA a Brief History

Lecture 2:

HIPAA Privacy vs Security

Lecture 3:

New definition of what constitutes protected health information

Lecture 4:

HIPAA and the Business Associate

Lecture 5:

Through examination of all 18 Standards and 44 Implementation Specifications of the HIPAA Security Rule and how to apply them

Lecture 6:

How to enforce policy for each standard and implementation specification

Lecture 7:

HIPAA and litigation

Day 2 Schedule

Lecture 1:

The Federal Audit Process and things to be ready for

Lecture 2:

HIPAA and Suing – how this works and examples of real cases

Lecture 3:

Technology and HIPAA – best practices and big “no-no’s”

Lecture 4:

Ransomware, Viruses, bad technology

Lecture 5:

HIPAA Texting and Emailing – myth vs reality

Lecture 6:

Personal Devices and HIPAA

Lecture 7:

HIPAA and the Audit Process

Lecture 8:

How to conduct a HIPAA Security Risk Assessment

Speaker:

Brian L Tuttle

ex-FDA Expert and former Associate Center Director of CDRH

Brian L Tuttle is a Certified Professional in Health IT (CPHIT), Certified HIPAA Professional (CHP), Certified HIPAA Administrator (CHA), Certified Business Resilience Auditor (CBRA), Certified Information Systems Security Professional (CISSP) with over 18 years’ experience in Health IT and Compliance Consulting.

With vast experience in health IT systems (i.e. practice management, EHR systems, imaging, transcription, medical messaging, etc.) as well as over 18 years’ experience in standard Health IT with multiple certifications and hands-on knowledge, Brian serves as compliance consultant and has conducted onsite and remote risk assessments for over 1000 medical practices, hospitals, health departments, insurance plans, and business associates throughout the United States.

Location: Miami, FL Date: April 18th & 19th, 2019 and Time: 9:00 AM to 6:00 PM

Venue:  Hyatt Place Miami Airport East, 3549 NW 42nd Ave, Miami, FL 33142, USA

Price:

1 ATTENDEE $2,000, Register for 1 attendee

5 ATTENDEES $10,000, Register for 5 attendees

10 ATTENDEES $20,000, Register for 10 attendees

Until March 10, Early Bird Price: $2,000.00, From March 11 to April 16, Regular Price: $2,200.00

Sponsorship Program benefits for seminar

For More Information

Contact us today!

NetZealous LLC DBA GlobalCompliancePanel

globalcompliancepanel@gmail.com

Toll free: +1-800-447-9407

Phone: +1-510-584-9661

Website:

Registration Link

Follow us on LinkedIn:

Like us our Facebook page:

Follow us on Twitter:

Virtual Seminar on HIPAA Training for Compliance Officer

This 6-hour seminar will be addressing how practice/business managers (or compliance offers) need to get their HIPAA house in order before the imminent audits occur. It will also address major changes under the Omnibus Rule and any other applicable updates for 2018.

Areas also covered will be texting, email, encryption, medical messaging, voice data and risk factors as they relate to IT.

The primary goal is to ensure everyone is well educated on what is myth and what is reality with this law, there is so much misleading information regarding the do’s and don’ts with HIPAA -I want to add clarity for compliance officers and what you guys need to do and how to best implement your HIPAA program based on over 18 years of personal experience working with Federal auditors, state auditors, and corporate auditors.

We will go through multiple scenarios that are commonly faced by compliance officers and how to manage these situations

I will also speak to real life litigated cases I have worked where HIPAA is being used to justify state cases of negligence -THIS IS BECOMING A HUGE RISK!

In addition, this course will cover the highest risk factors for being sued as well as being audited (these two items tend to go hand in hand).

Why you should attend

Join me in this in depth 6-hour seminar where we will get into the nitty-gritty about the roles and responsibilities of a HIPAA Compliance Officer.

Do you have an affective HIPAA compliance program? Do you know what needs to be done to satisfy the requirements?

New laws, funding, and enforcement mean increased risk for both business associates and covered entities – 2017 was a record year for enforcement and fines – 2018 will be no different.

HIPAA Omnibus – Do you know what’s involved and what you need to do?

What does Omnibus mean for covered entities and business associates?

Why should you be concerned?

Court cases that are changing the landscape of HIPAA and patient’s ability to sue!

TRIAL ATTORNEYS ARE MORE DANGEROUS THAN THE FEDERAL GOVERNMENT!!

It is important to understand the new changes going on at Health and Human Services as it relates to enforcement of HIPAA for both covered entities and business associates. You need to know how to avoid being low hanging fruit in terms of audit risk as well as being sued by individuals who have had their PHI wrongfully discloses due to bad IT or internal administrative practices.

Who Will Benefit

  • Practice Managers
  • Any Business Associates who work with medical practices or hospitals (i.e. billing companies, transcription companies, IT companies, answering services, home health, coders, attorneys, etc)
  • MD’s and other medical Professionals

Agenda

  • Updates for 2019
  • Requirements of Compliance Officers
  • New definition of what constitutes protected health information
  • Real life litigated cases
  • BYOD
  • Portable Devices
  • Business associates and the increased burden
  • Emailing of PHI
  • Texting of PHI
  • Federal Audit Process
  • HIPAA and suing – how this works
  • Risk Assessment
  • Ransomware and how to avoid
  • What to do when a breach occurs
  • Best Resources

Speaker Profile

Brian L Tuttle, CPHIT, CHP, CBRA, Net+, A+, CCNA, MCP is a Certified Professional in Health IT (CPHIT), Certified HIPAA Professional (CHP), Certified Business Resilience Auditor (CBRA) with over 15 years’ experience in Health IT and Compliance Consulting. Mr. Tuttle has worked all of those 15 years with MAG Mutual Healthcare Solutions and is now Senior Compliance Consultant and IT Manager with InGauge Healthcare Solutions (previously named MAG Mutual Healthcare Solutions). Almost all of Brian’s clients are earned by referral with little or no advertising. Brian is well known and highly regarded in medical circles throughout the United States .

Click Here to Continue Reading

Auditing Analytical Laboratories for FDA Compliance

There are two phases to this topic. The first is auditing itself. Good audits are well structured. They must consider the reasons for the audit, the regulatory requirements, as well as the nature of the laboratory being audited. We will discuss the considerations that must be made when auditing a laboratory. The social interactions that must be expected, the nature of the regulatory requirements and the nature of work that the laboratory performs will be discussed.

what-to-expect-from-an-energy-audit

The second phase considers what must be considered during the audit itself. Audits conducted by inexperienced or ignorant auditors are often worthless, wasting the time and money of both the auditors and the laboratory being audited. Auditors who are familiar with laboratory operations are needed as it is easy to be fooled into thinking that a non-compliant laboratory is operating normally. Different types of laboratories will require different auditor/specialists. We will discuss the pitfalls that auditors can fall into, and what questions laboratories may expect to encounter.

It is necessary for a company to know if an analytical laboratory is capable of operating in compliance with GMP or other regulations. This is especially critical if the laboratory is a quality control laboratory whose test results will be used to support the release of a product to the public or to support and application for permission to market a product.  The failure of a quality control laboratory to comply with regulations can result in the failure of a request for permission to market a product or a forced recall of a marketed product.

In extreme cases a revocation of the permission to market a product may be the result. In any case the inability to conform to regulations will result in a loss of confidence in the ability of the manufacturer to produce a product that meets quality and regulatory requirements, and, in turn, lead to a refusal to purchase a product.

It is critical that the audit of the laboratory be conducted in a professional manner, as a poor audit will waste money and lead to a false confidence in the abilities of the audited laboratory whether it is internal or external to the company.

  • Potential Auditors
  • Supervisors who must initiate Audits
  • Laboratory Supervisors and Workers
  • Quality Assurance and Control Supervisors and Lead Workers
  • Supervisory Management who must select Contractors
  • Managers
  • Directors
  • Vice Presidents who Supervise Quality Assurance
  • Quality Control
  • Regulatory Affairs Groups

Top benefits from this

A to Z’s of HIPAA Privacy, Security, and Breach Notification Rules

It is designed to provide intensive, two-day training in HIPAA compliance, including what’s new in the regulations, what’s changed recently, and what needs to be addressed for compliance by covered entities and business associates.

It provides the background and details for any manager of healthcare information privacy and security to know what are the most important privacy and security issues, what needs to be done for HIPAA compliance, and what can happen when compliance is not adequate.

Audits and enforcement will be explained, as well as privacy and security breaches and how to prevent them. Numerous references and sample documents will be provided.

Benefits from this Rules:

  • Information Security Officers
  • Risk Managers
  • Compliance Officers
  • Privacy Officers
  • Health Information Managers
  • Information Technology Managers
  • Medical Office Managers
  • Chief Financial Officers
  • Systems Managers
  • Legal Counsel
  • Operations Directors

HIPAA Privacy Rule Principles, Policies and Procedures

  • Patient Rights under HIPAA
  • Limitations on Uses and Disclosures
  • Required Policies and Procedures
  • Training and Documentation Requirements

Recent and Proposed Changes to the HIPAA Rules

  • New Penalty Structure
  • New HIPAA Audit Program
  • New Patient Rights
  • New Obligations for Business Associates

Go through here for detailed rules

200+ followers. WOWWWWWW…

followed- 200

Hello Everyone,

Today we have the pleasure of celebrating the fact that we have reached the milestone of 200+ followers on WordPress. Since we started this blog, we have had such a great time connecting with everyone.  we never expected to actually to connect with other people in the blogging community.

we are so incredibly thankful for each and every one of you who follows and comments on my blog posts. Please know that!

we would continue our blogging in these areas FDA Regulation, Medical Devices, Drugs and Biologics, Healthcare Compliance, Biotechnology, Clinical Research, Laboratory Compliance, Quality Management ,HIPAA Compliance ,OSHA Compliance, Risk Management, Trade and Logistics Compliance ,Banking and Financial Services, Auditing/Accounting & Tax, Packaging and Labeling, SOX Compliance, Environmental Compliance, Microsoft Excel Spreadsheet, Geology and Mining, Human Resources Compliance, Food Safety Compliance and etc.

Get more articlehttps://www.globalcompliancepanel.com/freeresources/resource-directory

Please follow us on

Facebook – https://www.facebook.com/TrainingsAtGlobalCompliancePanel

Twitter – https://twitter.com/gcpanel

LinkedIn – https://www.linkedin.com/company/10519587/admin/updates/

Internal Audit Checklist for HIPAA

Internal Audit Checklist for HIPAA.jpg

The internal audit checklist for HIPAA is one of the primary elements of HIPAA implementation. The passage of the Health Insurance Portability and Accountability Act (HIPAA) by the U.S. Congress in 1996 was aimed at regulating the way and process by which healthcare institutions across the country reveal the medical information of their patients.

The Department of Health and Human Services (HHS) is tasked with monitoring the compliance aspect of the law, i.e., it monitors how medical organizations comply with the provisions of HIPAA. In order to ensure that medical organization stay compliant with the provisions of HIPAA; auditors measure these compliance aspects with a checklist when testing companies’ medical data recording processes.

The internal audit checklist for HIPAA, like any other checklist, is a list of do’s and don’ts that a healthcare organization has to look to see if it is complying with its processes relating to medical data sharing and recording. These are the core areas against which auditors prepare and monitor the internal audit checklist for HIPAA:

Analysis and assessment of risk

Internal Audit Checklist for HIPAA3

One of the foremost aspects of the internal audit checklist for HIPAA is the organization’s analysis and assessment of the risk involved in disclosing medical information. Medical organizations of the designated types have to carry these out at regular, periodic intervals in ensuring that they don’t give opportunities for causing data breaches. Since healthcare organizations are involved in collecting, keeping and transferring of medical information; it is necessary for them to keep analyzing and assessing the risk involved in data breaches.

Gap analysis

In this category of internal audit checklist for HIPAA; auditors compare regulatory guidelines to security systems in the corporate sector. The idea is to help the medical organization outline its security requirements vis-a-vis its security infrastructure

Remediation

Internal Audit Checklist for HIPAA4

In this internal audit checklist for HIPAA; the healthcare organization relies on a number of technologies and steps to prevent any breach of data, and to also offset the damage done when a breach happens. The primary tools used in this internal audit checklist for HIPAA include software used for tracking defects, for process reengineering, CRM and a few ERP applications.

Planning for contingencies

An internal audit checklist for HIPAA also includes a set of plans that the healthcare organization has to have to be able to plan for contingencies. A healthcare organization can expect emergencies or disasters from any source, and these can be of any kind. An internal audit checklist for HIPAA should include plans for anticipating and dealing with these.

Personnel policies

biostatistics56

The policy a healthcare organization puts in place for its personnel is an important point in the internal audit checklist for HIPAA. It has to decide what kinds of trainings its staff members receive for implementing HIPAA compliance.

 

 

 

click to continue reading

HR Tech: President of First U.S. Firm to Microchip Employees Will Speak in Dallas on Workplace Wearables

Patrick McMullan will speak on how the microchip technology has impacted the employee experience and workplace productivity at Three Market Square — and address concerns about privacy, GPS tracking, and worker satisfaction.

HR Technology concept

What if your employer asked you to implant a microchip under your skin to help them keep track of you?

Three Square Market took that step, and made headlines last summer amid debate concerning invasions of privacy. It was the first company in the U.S. to offer to microchip its workforce — on a strictly voluntary basis, according to media reports.

Three Square Market President Patrick McMullan will share the experience at the upcoming 2017 Human Resources Technology Exchange in Dallas, which will take place Dec. 10-12.

“The international marketplace is wide open, and we believe that the future trajectory of total market share is going to be driven by whoever captures this arena first.”

Patrick McMullan

The Wisconsin-based provider of self-service breakroom vending machines had a “chip party” in July, during which 50 out of the company’s 85 employees agreed to trade in their employee IDs and passwords for a chip to be inserted in between their forefinger and thumb. The chipped employees can enter the building, sign into their computers, and pay for snacks, all with just a wave of the hand.

The decision to chip was driven by an aim to get ahead of the growing wearable technology trend, according to a release. By 2020, 75 million devices are predicted to be voluntarily in use.

“The international marketplace is wide open, and we believe that the future trajectory of total market share is going to be driven by whoever captures this arena first,” McMullan said in a BBC article from last summer.

Read More: http://snip.ly/4lnun#https://dallasinnovates.com/hr-tech-president-of-first-u-s-firm-to-microchip-employees-will-speak-in-dallas-on-workplace-wearables/