Navigate the HIPAA/HITECH Compliance Maze

Achieve HIPAA/HITECH compliance and implement your healthcare IT data protection and cybersecurity program.

The U.S. Department of Health and Human Services (HHS) developed regulations protecting the privacy and security of certain health information. They published what is commonly known as the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule and the HIPAA Security Rule. The Privacy Rule establishes national standards for the protection of certain health information. The Security Rule establishes a national set of security standards for protecting certain health information that is held or transferred in electronic form. The Security Rule also operationalizes the protections contained in the Privacy Rule by addressing the technical and non-technical safeguards that organizations called “covered entities” must put in place to secure individuals’ “electronic protected health information” (ePHI).

The Health Information Technology for Economic and Clinical Health (HITECH) Act promotes the adoption and meaningful use of health information technology. HITECH also mandates audits of healthcare providers to investigate and determine if they are in compliance with the HIPAA Privacy Rule and Security Rule.

Strong and effective data protection and cybersecurity program that allows healthcare organizations to fully understand the risks inherent in their systems and operational processes is paramount to meeting and maintaining HIPAA/HITECH compliance requirements