HIPAA Omnibus Rule Compliance- Understanding Roles and Responsibilities of Privacy and Security Officers

Registration Process: 8:30 AM – 9:00 AM

Session Start Time: 9:00 AM

Day one sets the stage with an overview of the HIPAA regulations and then continues with presentation of the specifics of the Privacy Rule, recent changes to the rules, and the basics of the Security Rule.

• Overview of HIPAA Regulations
• The Origins and Purposes of HIPAA
• Privacy Rule History and Objectives
• Security Rule History and Objectives
• Breach Notification Requirements, Benefits, and Results
• HIPAA Privacy Rule Principles, Policies and Procedures
• Patient Rights under HIPAA
• Limitations on Uses and Disclosures
• Required Policies and Procedures
• Training and Documentation Requirements
• Recent and Proposed Changes to the HIPAA Rules
• New Penalty Structure
• New HIPAA Audit Program
• New Patient Rights
• New Obligations for Business Associates
• HIPAA Security Rule Principles
• General Rules and Flexibility Provisions
• The Role of Risk Analysis
• Security Safeguards
• Training and Documentation

Day two begins with a discussion of typical security issues and means for avoiding breaches and meeting compliance requirements when it comes to modern technologies, such as texting, e-mail, and social media. Finally, the day concludes with a session on the essential activities of documenting policies, procedures, and activities, training staff and managers in the issues and policies they need to know about, and examining compliance readiness through drills and self-audits.

• Risk Mitigation, Breach Prevention, and Compliance Remediation
• Typical Security Risks and Preventing Breaches
• Social Media, Texting, e-mail, and Privacy
• Dealing with Portable Devices and Remote Access
• Compliance Planning
• Documentation, Training, Drills and Self-Audits
• How to Organize and Use Documentation to Your Advantage
• Training Methods and Compliance Improvement
• Conducting Drills in Incident and Breach Response
• Using the HIPAA Audit Protocol for Documentation and Self-Auditing

Jim Sheldon-Dean is the founder and director of compliance services at Lewis Creek Systems, LLC, a Vermont-based consulting firm founded in 1982, providing information privacy and security regulatory compliance services to a wide variety of health care entities.

Mr. Sheldon-Dean serves on the HIMSS Information Systems Security Workgroup, has co-chaired the Workgroup for Electronic Data Interchange Privacy and Security Workgroup, and is a recipient of the WEDI 2011 Award of Merit. He is a frequent speaker regarding HIPAA and information privacy and security compliance issues at seminars and conferences, including speaking engagements at numerous regional and national healthcare association conferences and conventions and the annual NIST/OCR HIPAA Security Conference in Washington, D.C.

He has more than 30 years of experience in policy analysis and implementation, business process analysis, information systems and software development. His experience includes leading the development of health care related Web sites; award-winning, best-selling commercial utility software; and mission-critical, fault-tolerant communications satellite control systems. In addition, he has eight years of experience doing hands-on medical work as a Vermont certified volunteer emergency medical technician. He received his B.S. degree, summa cum laude, from the University of Vermont and his master’s degree from the Massachusetts Institute of Technology.