Webinar on HIPAA Breach Notification Rule - What You Must Do To Comply

Overview: Final regulations for the new HIPAA Breach Notification Rule require much more than notifying individuals affected by a Breach of their Protected Health Information (PHI). Covered Entities and Business Associates first must follow and document a very specific process to determine if a Breach occurred. If no Breach occurred documentary proof must be kept for six years. If a Breach did occur timely notifications and other actions must be undertaken and documented.

This webinar will explain:

• What Covered Entities and Business Associates must do to comply with the Breach Notification Rule
• What is and is not a Breach
  • Three exceptions - when an acquisition, access, use, or disclosure of PHI not permitted by the Privacy Rule is not a Breach
  • How to perform a Breach Risk Assessment to determine if you can demonstrate a a low probability that the PHI was compromised
• Who must be notified in case of a Breach
• When notifications must be provided
• What information must be contained in each notification
• Other requirements in case of a Breach
  • Investigate
  • Mitigate harm to affected individuals
  • Protect against further Breaches
  • Document everything
• Planning and preparation for the worst - public relations and mitigation strategies to limit damage to the organization's reputation and financial well-being

Why should you attend:

• Breaches and incidents that might be Breaches happen all the time!
• More than 173,000 separate breaches of Protected Health Information (PHI) affecting less than 500 individuals were reported to the U. S. Department of Health and Human Services (HHS) between September, 2009 and May 31, 2015 and in the same period HHS received approximately 1240 reports of PHI breaches that affected 500 or more individuals
• An acquisition, access, use, or disclosure of PHI not permitted by the Privacy Rule is presumed to be a Breach unless it falls within an exception or the Covered Entity or Business Associate can demonstrate a low probability that the PHI was compromised
• Not all suspected Breaches are Breaches - but you must know the rules to assess each incident and - when appropriate - prove it was not a Breach
• A Covered Entity or Business Associate has the burden to prove an acquisition, access, use, or disclosure of PHI was not a Breach or, if a Breach occurred, that it made all required notifications
• Prominent media outlets in the region must be notified of Breaches affecting 500 or more individuals
• To preserve your organization's reputation and limit its financial loss you must be prepared to assess a suspected Breach and to respond properly and perhaps publicly when a Breach does occur

Speaker :

Paul R. Hales J.D, is an attorney at law in St. Louis, Missouri whose practice has included specialization in the HIPAA Privacy and Security Rules from the dates they became effective. He provides assistance and counseling on the new, more demanding compliance requirements of the HITECH modifications to HIPAA. Mr. Hales is licensed to practice before the Supreme Court of the United States, Federal Appellate and District Courts, the State Courts of Missouri and is a graduate of Columbia University Law School.

Price : $139.00

Contact Info:

MentorHealth
Phone No: 1-800-385-1607
FaX: 302-288-6884
support@mentorhealth.com
Event Link:  http://bit.ly/1JsXaa7
http://www.mentorhealth.com/