|
HIPAA Compliance with Steelgate Online Backup
Professional backup services can help medical services practitioners reach HIPAA compliance for secure off-site storage of electronic records and opens path for expanding ones services to become expert in contingency planning
HIPAA background In 1996, Congress enacted the Health Insurance Portability and Accountability Act (HIPAA). The legislative goals of HIPAA were to mandate the industry to implement procedures to reduce the administrative costs of healthcare, develop standard transactions for consistency in the industry, promote security and confidentiality of patient records and to provide incentive for the healthcare industry to use electronic communications to make patient records available no matter where the patient was being treated - a process that takes days with manual records - and particularly useful in emergencies. All health care providers, insurance providers, health care clearinghouses or health plans that electronically maintains or transmits health information pertaining to an individual must comply with HIPAA regulations. Failure to comply with the Act's requirements originally had some onerous penalties for disclosure of any element of medical information to sources without need, such as a clerk inadvertently faxing some record to the wrong fax number, would have had both financial and incarceration involved. These penalties have been reduced by interpretation by the Secretary of HHS, who was chartered by the Act to develop the compliance guidelines. The Act, as passed by Congress, set 1998 as the start date for compliance, but the pace with which the Federal Bureaucracy operates has delayed the start date to 2005. All in the healthcare industry are now preparing to comply with the Act.
Steelgate Technologies Online Backup is the ideal subscription service provider product to enable a service provider to deliver mandated services for their clients. You can learn more about the HIPAA requirements by getting a simplified version of the Act's compliance requirements at http://aspe.hhs.gov/admnsimp/pl104191.htm .
HIPAA contingency planning By working with a professional data backup service provider a medical practice or medical information chain participant has a chance to become in compliance with HIPAA. Services that can support specific areas of contingency planning and compliance, include:
- Off-site Data backup plan
- Disaster recovery plan
- Application and data criticality assessment
- Emergency operations plan
- Procedures for above in place
HIPAA requires those in the healthcare industry to have an off-site, encrypted remote electronic data backup and a contingency plan to meet the mandated Administrative Procedures in the Act. Every practitioner, be they doctor, clinic, hospital, testing lab, surgery center, or any of the other organization that provides services to individuals and stores patient medical records, must backup to a secure, encrypted (for privacy) off-site location each day. By working with a professional data backup service provider a healthcare industry participant will be in compliance with HIPAA. Services that can support specific areas of contingency planning and compliance, include:
- Off-site, encrypted Data Backup
- Contingency Planning
- Disaster Recovery
- Emergency Operations
- Privacy
The selection of a professional off-site backup service provider like Steelgate Technologies, who can assure the practitioner that the stored data is encrypted for privacy, can ease one's compliance with the Act by insuring that the practitioner has a secure data backup solution, automatic backups for data storage and recovery. A professional service can also help prepare a written data backup plan for the Act's requirements and assist in preparing contingency plans.
The number of doctors in your area can be learned from contacting your State Medical Board. For example, the Federation of State Medical Boards reports that there are 9,115 doctors registered in Kentucky, 13,257 in Indiana, 1,160 in Alaska, and 2,029 in Delaware. State Medical Boards have web sites from which you can gain the necessary information. In California, for example, the Board's web site is http://www.medbd.ca.gov/. Each doctor who maintains medical records is mandated to automate these records, representing a prospect for backup, recovery, and contingency services.
|
|