What is HIPAA?
The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that calls for regulations to protect the privacy, security and integrity of medical records. These regulations, drafted by the Health and Human Services Administration in collaboration with the healthcare industry and enacted in April 2001, cover all aspects of the handling, storage and transmission of patient healthcare information.
Who must comply?
HIPAA does not apply solely to healthcare providers. Any organization handling or storing personally-identifiable data relating to an individual's healthcare, treatment, insurance coverage, or payment is subject to the HIPAA regulations. These organizations include insurance companies, hospitals, healthcare providers, and employers, among others.
When does it take effect?
HIPAA regulations are in effect today. Compliance with the HIPAA Privacy Regulations is required by April 14, 2003, and with the Transaction and Code Set regulations by October 16, 2003. Security Regulations are expected to be issued in the fall of 2002, with compliance required by the fall of 2004.
Why should you be concerned?
Failure to comply with the HIPAA regulations carries both financial and criminal penalties. Identifying the most efficient and cost-effective way to achieve compliance requires an early and comprehensive approach.
How can we assist you?
Our HIPAA Compliance Practice Group, in collaboration with legal specialists, works with you to meet the challenges posed by the sweeping HIPAA regulations, protect your patients' and employees' privacy, improve security and meet the demands of your customers for improved protection of personal data. We leverage our extensive knowledge of and experience with security, systems integration, application development, access control, database administration and records management to offer a range of solutions:
- Education and Compliance Awareness
- Gap and Risk Assessments
- Strategy and Remediation Planning
- Complete Remediation Solutions
- Ongoing Compliance Management
- 24x7 Managed Compliance Services
Thaumaturgix HIPAA service offerings
HIPAA Security service offering
Because we combine technological know-how with our partner company's legal expertise, we can identify and solve your problems relating to the use, management, transmission and storage of medical data under the new HIPAA regulations. We are a full-service technology consulting company and can provide strategies and technologies to improve reliability, performance and efficiency as we work together to deliver HIPAA compliance.
Our HIPAA Practice Group offers free HIPAA seminars in addition to our assessment and compliance services. Please click here to request more information about our seminars and events or other HIPAA compliance services.
View a HIPAA Gap Assessment Case Study.
Audit, Logging, and Single-Sign-On under HIPAA
