Overview: The webinar will explain the process for covered entities and business associates to use to draft, adopt, and implement HIPAA compliance policies. The webinar will begin with a discussion of how to decide, using a gap analysis and a risk analysis, what policies the organization needs, including required, addressable, and other policies. Then, the webinar will cover writing a policy. Writing a policy is easier than one may think. It is a three-step process: researching, drafting, and revising.
This webinar will teach you to ask questions, solicit help, collect samples, keep the principles of substance, organization, coherence, style, and correctness in mind while you are drafting, send your draft out for review, incorporate comments, implement the policy, and repeat as necessary. The prospect of developing and writing perhaps as many as 70 policies to attain HIPAA compliance may still seem daunting, but this webinar will teach you how to make a checklist, take it step by step, and enlist the help of others when you need it.
Why should you attend: The majority of the DHHS civil money penalties and settlements in lieu thereof involve, sometimes with other violations, failure to perform a written risk analysis, failure to develop required policies, and failure to conduct adequate HIPAA training. These penalties usually are in the seven-figure range.
Failure to conduct a written risk analysis, adopt required policies, or conduct required training qualifies as "willful neglect," which carries the highest civil money penalty ("CMP") and which penalty cannot be waived by DHHS as can violations due to a reasonable cause. DHHS entered into a settlement with Massachusetts General Hospital for $1 million for a breach involving leaving paper PHI records on a subway. The sanction was because Massachusetts General had not trained its workforce on proper security for PHI taken offsite and did not have a work-at-home policy. Significantly, HIPAA does not even mention working at home, much less specifically require such a policy.
Areas Covered in the Session:
Who Will Benefit:
Alice M. McCart has been an editor for more than three decades and an attorney admitted to practice law in Illinois since 1993. She has master’s degrees in teaching and journalism and enjoys freelance editing, tutoring, and teaching effective writing to adults. She has held positions in the federal government, in professional associations, in the corporate world, in private law practice, and in HIPAA consulting.
She now lives and works in Overland Park, Kansas, with the law firm of Tomes & Dvorak, Chartered, the HIPAA consulting firm EMR Legal, Inc., and the publishing company Veterans Press, Inc. Also owned by Jonathan P. Tomes and Richard D. Dvorak, EMR Legal is a national HIPAA consulting firm that provides consulting services for clients ranging from a large county government, with different health entities that need HIPAA compliance help, to a small transcription service.
The EMR Legal team has provided consultation to more than 1,000 clients regarding health care regulations since 1998. Veterans Press publishes HIPAA compliance books, CDs, and other tools by Jonathan P. Tomes and others, including The Compliance Guide to HIPAA and the DHHS Regulations and its accompanying HIPAA Documents Resource Center CD, both in their 5th edition (6th edition forthcoming 2014), an integral part of the HIPAA Compliance Library, and his latest two books, The Complete HIPAA Policies and Procedures Guide, with accompanying HIPAA Compliance Sample Policies and Procedures CD, and Your Happy HIPAA Book, among many other books and HIPAA compliance tools, all of which Alice McCart has edited.
Phone No: 1-800-385-1607
Event Link: http://bit.ly/Key-Factors-to-Write-HIPAA-Compliance-Policies