s, Texts and Social Media: What Physicians Need to Know

Size: px
Start display at page:

Download "s, Texts and Social Media: What Physicians Need to Know"

Transcription

1 s, Texts and Social Media: What Physicians Need to Know 1

2 Today s Learning Objectives By the end of today s program, you will be able to : Identify the risks to patients privacy which , text messaging and social media pose Recognize the malpractice risk associated with using , text messaging and social media Assess best practices to follow if using , text messaging and/or social media 2

3 A QUICK SHOW OF HANDS: If your practice had a secure patient portal, would you use it to post patient test results? 3

4 4

5 Defining our terminology: WHAT WE ARE TALKING ABOUT TODAY? 5

6 s, texts, & instant messages About patient care Not in a patient portal 6

7 Patient Portal The part of your IT system that allows for secure communication about patient s health information. 7

8 Social media Websites where users: connect online comment on, or reply to comments rate information post information, pictures or videos 8

9 Who am I communicating with? Patients Consultants Internal Other facilities 9

10 10

11 Electronic communications: WHAT ARE THE RISKS? 11

12 RISK 1: Not capturing all patient care in the medical record. 12

13 13

14 RISK 2: Nothing is anonymous. Everything is discoverable. 14

15 15

16 RISK 3: Accidentally establishing a physician-patient relationship. 16

17 17

18 RISK 4: HIPAA & Privacy Breaches 18

19 How much do you care that only you have access to this information? 19

20 RISK 5: Angering your patient 20

21 21

22 22

23 RISK 6: Damage to your professional reputation 23

24 24

25 25

26 RISK 7: Legal and ethical considerations 26

27 27

28 28

29 Mitigating Electronic Communication Risk: WHAT NOT TO DO 29

30 Beware of red flags DO NOT: Provide medical advice or comment on medical issues through social media websites or other websites such as healthtap Text orders Use abbreviations Use for emergencies 30

31 Avoid angering patients Do not: Discuss sensitive subject matter Discuss patients anonymously 31

32 Protect Privacy Do not: or text message a patient from a personal address or phone number. Message or post any PHI anywhere unless it is: Encrypted Limited to those who should have this information Post in response to unfavorable comments online 32

33 Avoid legal issues DO NOT: Post any confidential or proprietary information Comment on legal issues Post content that is not your own without express written permission Refer to financial or other relationships you may have with professionals of products or services Refer to products or services of third parties that you discuss or review online. 33

34 Protect your identity Do not: Allow any other person or entity to use your identification for posting or viewing comments. 34

35 Act ethically DO NOT: Engage in bullying or discrimination Post anything that is defamatory, libelous, threatening, harassing, abusive, obscene, knowingly false or otherwise inappropriate Post advertisements or solicitations of business Post chain letters, spam or pyramid schemes Impersonate another person 35

36 Mitigating Electronic Communication Risk: WHAT TO DO 36

37 Remember it s discoverable DO: Recognize that anything said or otherwise posted on social media websites is in the public domain and potentially subject to discovery. 37

38 Integrate your systems DO: Ensure all communications get into the medical record in a timely manner Make it easy to do Establish safeguards 38

39 Accept limitations DO: Utilize in person or over the phone communications when the subject matter calls for it Ensure diagnosis and treatment takes place in person. Remember you are not in control of what happens after you hit send/submit Watch your tone and be on the lookout for miscommunications Be sure to read things before you hit send 39

40 Protect privacy DO: Encrypt it, and use patient portals when available. Just because the patient identifies themselves, doesn t mean you can. Use privacy settings on social media, , etc. Remember, unencrypted s, texts and social media present a higher risk for breaches, and are not HIPAA compliant unless additional steps are taken to protect PHI and you have the patients written permission. 40

41 Keep it professional DO: Recognize that behavior on social media websites reflects not only on the individual, but on your practice, colleagues, and the medical profession Use disclaimers. An example: The views expressed here are solely the author s and do not represent the opinions of [practice name]. Use common sense: If in doubt, do not post it. Inform the compliance officer if a colleague s social media behavior is inappropriate. 41

42 Set rules Do: agree what is and isn t acceptable formalize your rules ensure all staff understand and follow them 42

43 Get permission Do: Get signed permission from patients before using e-communications 43

44 HOW TO GET STARTED 44

45 A QUICK SHOW OF HANDS: Are you confident that you know what kind of electronic communications are occurring in your practice? 45

46 ASSESS WHAT YOU KNOW Be sure you REALLY know: How am I communicating? Who am I communicating with? Where am I communicating from? What am I communicating about? Why are we communicating this way? Keep an updated record 46

47 A QUICK SHOW OF HANDS: Are you feeling overwhelmed by all of this information? 47

48 EVALUATE YOUR STRATEGIES Decide on the do s and don ts, and formalize them into a policy for your practice. Cover: Texting, , social media, patient portals Personal and professional accounts Have everyone sign the policy to show they are aware of it 48

49 MANAGE YOUR PROCESSES Update your processes: Who can do what? Who do I inform if something is wrong? Train: Doctors Staff Get patient consent in writing for texting, , and/or patient portals 49

50 MEASURE AND MONITOR Are you: Following your own rules? Reviewing your policies at least annually? Still meeting your practice needs? Conducting ongoing training when needed? If so, celebrate! If not: Repeat: Assess, Evaluate, Manage and Monitor Consider disciplinary action 50

51 QUESTIONS? 51

52 Thank you for joining us today! Our final takeaways: Know what is actually happening in your practice Set rules about what should and shouldn t happen Make sure everyone understands the rules Monitor and revisit technology changes rapidly!

53 How to Claim CME Credit Claim credit at by July 31, Use access code Questions? AMA staff will be available in the Crystal Ballroom Foyer to provide assistance. You may also view the following online tutorial: 53

Acceptable Use Policy

Acceptable Use Policy IT and Operations Section 100 Policy # Organizational Functional Area: Policy For: Date Originated: Date Revised: Date Board Approved: Department/Individual Responsible for Maintaining Policy: IT and Operations

More information

8 COMMON HIPAA COMPLIANCE ERRORS TO AVOID

8 COMMON HIPAA COMPLIANCE ERRORS TO AVOID Billing & Reimbursement Revenue Cycle Management 8 COMMON HIPAA COMPLIANCE ERRORS TO AVOID Billing and Reimbursement for Physician Offices, Ambulatory Surgery Centers and Hospitals Billings & Reimbursements

More information

HIPAA Privacy & Security Training. Privacy and Security of Protected Health Information

HIPAA Privacy & Security Training. Privacy and Security of Protected Health Information HIPAA Privacy & Security Training Privacy and Security of Protected Health Information Course Competencies: This training module addresses the essential elements of maintaining the HIPAA Privacy and Security

More information

WASHINGTON UNIVERSITY HIPAA Privacy Policy # 7. Appropriate Methods of Communicating Protected Health Information

WASHINGTON UNIVERSITY HIPAA Privacy Policy # 7. Appropriate Methods of Communicating Protected Health Information WASHINGTON UNIVERSITY HIPAA Privacy Policy # 7 Appropriate Methods of Communicating Protected Health Information Statement of Policy Washington University and its member organizations (collectively, Washington

More information

OHSU s Alumni Relations Program (housed at the OHSU Foundation): 1121 SW Salmon Street, Suite #100 Portland, OR

OHSU s Alumni Relations Program (housed at the OHSU Foundation): 1121 SW Salmon Street, Suite #100 Portland, OR OHSU Email Address for Life Terms and Conditions These terms and conditions govern your registering, receipt, and use of an @alumni.ohsu.edu email account. Registering for an @alumni.ohsu.edu email account

More information

Compliance & HIPAA Annual Education

Compliance & HIPAA Annual Education Compliance & HIPAA Annual Education 1 The purpose of this education is to UPDATE The purpose and of this education REFRESH is to UPDATE your and REFRESH understanding understanding of: of: Aultman s Compliance

More information

Information Privacy and Security Training 2016 for Instructors and Students. Authored by: Office of HIPAA Administration

Information Privacy and Security Training 2016 for Instructors and Students. Authored by: Office of HIPAA Administration Information Privacy and Security Training 2016 for Instructors and Students Authored by: Office of HIPAA Administration Objectives After you finish this Computer-Based Learning (CBL) module, you should

More information

ICT Acceptable Use Policy for Students

ICT Acceptable Use Policy for Students ICT Acceptable Use Policy for Students a 52 Eurobin Avenue, Manly NSW 2095 t +61 2 9977 5144 f +61 2 9976 2753 cricos 03290E e administration@stellamaris.nsw.edu.au w www.stellamaris.nsw.edu.au abn 88

More information

Kings Heath Academy Acceptable Use (Staff and Students) Policy and Procedures September 2018

Kings Heath Academy Acceptable Use (Staff and Students) Policy and Procedures September 2018 Kings Heath Academy Acceptable Use (Staff and Students) Policy and Procedures September 2018 Staff responsible: Kim Duff Principal This policy will be reviewed in September 2019 Dfe number: 9282153 Kings

More information

ACCEPTABLE USE ISO INFORMATION SECURITY POLICY. Author: Owner: Organisation: Document No: Version No: 1.0 Date: 10 th January 2010

ACCEPTABLE USE ISO INFORMATION SECURITY POLICY. Author: Owner: Organisation: Document No: Version No: 1.0 Date: 10 th January 2010 INFORMATION SECURITY POLICY EMAIL ACCEPTABLE USE ISO 27002 7.1.3 Author: Owner: Organisation: Document No: Chris Stone Ruskwig TruePersona Ltd SP-7.1.3 No: 1.0 Date: 10 th January 2010 Copyright Ruskwig

More information

Communication and Usage of Internet and Policy

Communication and Usage of Internet and  Policy Communication and Usage of Internet and Email Policy Policy Category Administration Policy Code ADM HE 27 Policy owner Chief Executive Officer Responsible Officer Chief Executive Officer Approving authority

More information

WHITE PAPER. HIPAA Breaches Continue to Rise: Avoid Becoming a Casualty

WHITE PAPER. HIPAA Breaches Continue to Rise: Avoid Becoming a Casualty WHITE PAPER HIPAA Breaches Continue to Rise: Avoid Becoming a Casualty WHITE PAPER HIPAA Breaches Continue to Rise: Avoid Becoming a Casualty By Jill Brooks, MD, CHCO and Katelyn Byrne, BSN, RN Data Breaches

More information

Auditing and Monitoring for HIPAA Compliance. HCCA COMPLIANCE INSTITUTE 2003 April, Presented by: Suzie Draper Sheryl Vacca, CHC

Auditing and Monitoring for HIPAA Compliance. HCCA COMPLIANCE INSTITUTE 2003 April, Presented by: Suzie Draper Sheryl Vacca, CHC Auditing and Monitoring for HIPAA Compliance HCCA COMPLIANCE INSTITUTE 2003 April, 2003 Presented by: Suzie Draper Sheryl Vacca, CHC 1 The Elements of Corporate Compliance Program There are seven key elements

More information

Healthfirst Website Privacy Policy

Healthfirst Website Privacy Policy Healthfirst Website Privacy Policy We value your relationship with us and have detailed our privacy objectives for our website below. Please be sure to read this notice as it covers the terms and conditions

More information

HIPAA Compliance & Privacy What You Need to Know Now

HIPAA  Compliance & Privacy What You Need to Know Now HIPAA Email Compliance & Privacy What You Need to Know Now Introduction The Health Insurance Portability and Accountability Act of 1996 (HIPAA) places a number of requirements on the healthcare industry

More information

and Privacy HIPAA-Compliance Checklist

and Privacy HIPAA-Compliance Checklist Email and Privacy HIPAA-Compliance Checklist TBHI Checklist Copyright 2017 Telebehavioral Health Institute All rights reserved. Telebehavioral Health Institute www.telehealth.org No part of this publication

More information

Implementing an Audit Program for HIPAA Compliance

Implementing an Audit Program for HIPAA Compliance Implementing an Audit Program for HIPAA Compliance Mike Lynch Fifth National HIPAA Summit November 1, 2002 Seven Guiding Principles of HIPAA Rules Quality and Availability of Care Nothing in the proposed

More information

This Policy applies to all staff and other authorised users in St Therese School.

This Policy applies to all staff and other authorised users in St Therese School. St. Therese School Computer and Internet Policy STAFF Policy Statement All staff and other authorised users of St Therese information and communications technology are to use the technology only in a way

More information

TERMS OF USE Terms You Your CMT Underlying Agreement CMT Network Subscribers Services Workforce User Authorization to Access and Use Services.

TERMS OF USE Terms You Your CMT Underlying Agreement CMT Network Subscribers Services Workforce User Authorization to Access and Use Services. TERMS OF USE A. PLEASE READ THESE TERMS CAREFULLY. YOUR ACCESS TO AND USE OF THE SERVICES ARE SUBJECT TO THESE TERMS. IF YOU DISAGREE OR CANNOT FULLY COMPLY WITH THESE TERMS, DO NOT ATTEMPT TO ACCESS AND/OR

More information

Computer Use and File Sharing Policy

Computer Use and File Sharing Policy Computer Use and File Sharing Policy Williamson College recognizes the value of computer and other electronic resources to improve student learning and enhance the administration and operation of its school.

More information

HIPAA Privacy, Security and Breach Notification

HIPAA Privacy, Security and Breach Notification HIPAA Privacy, Security and Breach Notification HCCA East Central Regional Annual Conference October 2013 Disclaimer The information contained in this document is provided by KPMG LLP for general guidance

More information

E RADAR. All Rights Reserved. Acceptable Use Policy

E RADAR. All Rights Reserved.  Acceptable Use Policy Email Acceptable Use Policy For further help, please contact support@eradar.eu Item Number LD 0002 Author E RADAR LIMITED Disclaimer This template is provided with the understanding that the publisher

More information

Information Privacy and Security Training Authored by: Office of HIPAA Administration

Information Privacy and Security Training Authored by: Office of HIPAA Administration Information Privacy and Security Training 2018 Authored by: Office of HIPAA Administration Objectives After you finish this Computer-Based Learning (CBL) module, you should be able to: Define privacy practices

More information

The Australian Privacy Act An overview of the Australian Privacy Principles (APPs) Author: Paul Green

The Australian Privacy Act An overview of the Australian Privacy Principles (APPs) Author: Paul Green The Australian Privacy Act An overview of the Australian Privacy Principles (APPs) Author: Paul Green INTRODUCTION If you are collecting or processing personal information then you are likely to be required

More information

Corporate Policy. Revision Change Date Originator Description Rev Erick Edstrom Initial

Corporate Policy. Revision Change Date Originator Description Rev Erick Edstrom Initial Corporate Policy Information Systems Acceptable Use Document No: ISY-090-10 Effective Date: 2014-06-10 Page 1 of 5 Rev. No: 0 Issuing Policy: Information Systems Department Policy Originator: Erick Edstrom

More information

MANUAL OF UNIVERSITY POLICIES PROCEDURES AND GUIDELINES. Applies to: faculty staff students student employees visitors contractors

MANUAL OF UNIVERSITY POLICIES PROCEDURES AND GUIDELINES. Applies to: faculty staff students student employees visitors contractors Page 1 of 6 Applies to: faculty staff students student employees visitors contractors Effective Date of This Revision: June 1, 2018 Contact for More Information: HIPAA Privacy Officer Board Policy Administrative

More information

Electronic Network Acceptable Use Policy

Electronic Network Acceptable Use Policy Electronic Network Acceptable Use Policy 2016-2017 www.timothychristian.com ELECTRONIC NETWORK ACCEPTABLE USE POLICY Electronic Network This Policy is intended to serve as a guide to the scope of TCS s

More information

Acceptable Use Policy

Acceptable Use Policy Acceptable Use Policy POLICY 07.01.01 Effective Date: 01/01/2015 The following are responsible for the accuracy of the information contained in this document Responsible Policy Administrator Information

More information

Peaceful Pill Forum Rules

Peaceful Pill Forum Rules Peaceful Pill Forum Rules The Exit Peaceful Pill Forums are a private Forum for the purpose of discussing the content of and asking questions in regard to The Peaceful Pill ehandbook. While we encourage

More information

HIPAA How to Comply with Limited Time & Resources. Jonathan Pantenburg, MHA, Senior Consultant August 17, 2017

HIPAA How to Comply with Limited Time & Resources. Jonathan Pantenburg, MHA, Senior Consultant August 17, 2017 HIPAA How to Comply with Limited Time & Resources Jonathan Pantenburg, MHA, Senior Consultant JPantenburg@Stroudwater.com August 17, 2017 Stroudwater Associates is a leading national healthcare consulting

More information

ICT User Policy. for use in Essa Academy Essa Primary Academy Essa Nursery and Support Services

ICT User Policy. for use in Essa Academy Essa Primary Academy Essa Nursery and Support Services ICT User Policy for use in Essa Academy Essa Primary Academy Essa Nursery and Support Services For approval and adoption by the Board of Directors- 7 July 2017 For adoption by Essa Academy LGB- 19 September

More information

What is HIPAA? The Health Insurance Portability and Accountability Act (HIPAA) was enacted in 1996.

What is HIPAA? The Health Insurance Portability and Accountability Act (HIPAA) was enacted in 1996. HIPAA Training What is HIPAA? The Health Insurance Portability and Accountability Act (HIPAA) was enacted in 1996. It provides the ability to transfer and continue health insurance coverage for workers

More information

American Academy of Audiology Responses to Questions from HIPAA Webinar

American Academy of Audiology Responses to Questions from HIPAA Webinar American Academy of Audiology Responses to Questions from HIPAA Webinar IMPORTANT: DISCLAIMER REGARDING THE USE OF THIS INFORMATION: THESE RESPONSES ARE NOT INTENDED AS, AND DO NOT CONSTITUTE, LEGAL OR

More information

HIPAA Privacy and Security. Rochelle Steimel, HIPAA Privacy Official Judy Smith, Staff Development January 2012

HIPAA Privacy and Security. Rochelle Steimel, HIPAA Privacy Official Judy Smith, Staff Development January 2012 HIPAA Privacy and Security Rochelle Steimel, HIPAA Privacy Official Judy Smith, Staff Development January 2012 Goals and Objectives Course Goal: Can serve as annual HIPAA training for physician practice

More information

Grand Avenue Primary and Nursery School ICT Data management. Contents

Grand Avenue Primary and Nursery School ICT Data management. Contents Grand Avenue Primary and Nursery School ICT Data management Contents 1. Acceptable Use Statement 2. Transfer and Offsite Use of Sensitive Data 3. E-safety 4. Declaration Introduction These three policy

More information

Internet and Policy

Internet and  Policy CITY OF JOHNSON CITY Internet and E-mail Policy Revision Number: 4 Page: 1 of 4 1.0 POLICY STATEMENT: The purpose of the Internet Policy is to implement guidelines for the establishment, administration,

More information

Acceptable Use Policy

Acceptable Use Policy Acceptable Use Policy 1. Overview The Information Technology (IT) department s intentions for publishing an Acceptable Use Policy are not to impose restrictions that are contrary to Quincy College s established

More information

HIPAA Compliance: What it is, what it means, and what to do about it. Adam Carlson, Security Solutions Consultant Intapp

HIPAA Compliance: What it is, what it means, and what to do about it. Adam Carlson, Security Solutions Consultant Intapp HIPAA Compliance: What it is, what it means, and what to do about it. Adam Carlson, Security Solutions Consultant Intapp Agenda Introductions HIPAA Background and History Overview of HIPAA Requirements

More information

DONE FOR YOU SAMPLE INTERNET ACCEPTABLE USE POLICY

DONE FOR YOU SAMPLE INTERNET ACCEPTABLE USE POLICY DONE FOR YOU SAMPLE INTERNET ACCEPTABLE USE POLICY Published By: Fusion Factor Corporation 2647 Gateway Road Ste 105-303 Carlsbad, CA 92009 USA 1.0 Overview Fusion Factor s intentions for publishing an

More information

Student Network, Computing & Software Usage Regulations Version th July 2006

Student Network, Computing & Software Usage Regulations Version th July 2006 Student Network, Computing & Software Usage Regulations Version 1.0 6 th July 2006 Copyright 2006 Institute of Technology, Sligo, Ireland. 1 1.1 General Computing Facilities Computing facilities provided

More information

Staff Information System Acceptable Use Policy

Staff Information System Acceptable Use Policy Staff Information System Acceptable Use Policy Hing Shung Chan Vice President of Information Technology Information Security Officer Table of Contents I. Definitions II. Rights and Responsibilities III.

More information

Banner Health Information Security and Privacy Training Team. Morgan Raimo Paul Lockwood

Banner Health Information Security and Privacy Training Team. Morgan Raimo Paul Lockwood Banner Health Information Security and Privacy Training Team Morgan Raimo Paul Lockwood PHI Storage InfoGraphics PHI Data Storage and Sharing Cybersecurity and Privacy Training and Awareness Table of Contents

More information

HIPAA Faux Pas. Lauren Gluck Physician s Computer Company User s Conference 2016

HIPAA Faux Pas. Lauren Gluck Physician s Computer Company User s Conference 2016 HIPAA Faux Pas Lauren Gluck Physician s Computer Company User s Conference 2016 Goals of this course Overview of HIPAA and Protected Health Information Define HIPAA s Minimum Necessary Rule Properly de-identifying

More information

Acceptable Use Policy

Acceptable Use Policy Acceptable Use Policy 1. Purpose The purpose of this policy is to outline the acceptable use of computer equipment at Robotech CAD Solutions. These rules are in place to protect the employee and Robotech

More information

Acceptable Use Policy

Acceptable Use Policy Acceptable Use Policy 1. Overview ONS IT s intentions for publishing an Acceptable Use Policy are not to impose restrictions that are contrary to ONS established culture of openness, trust and integrity.

More information

LifeWays Operating Procedures

LifeWays Operating Procedures 07-02.08 EMAIL GUIDELINES AND REQUIREMENTS I. PURPOSE To define the security, privacy and professional standards and considerations regarding electronic mail communication. II. SCOPE This procedure covers

More information

The HIPAA Omnibus Rule

The HIPAA Omnibus Rule The HIPAA Omnibus Rule What You Should Know and Do as Enforcement Begins Rebecca Fayed, Associate General Counsel and Privacy Officer Eric Banks, Information Security Officer 3 Biographies Rebecca C. Fayed

More information

: Acceptable Use Policy

: Acceptable Use Policy : Acceptable Use Policy This Acceptable Use Policy ("Policy") describes the proper and prohibited use of 's Hosting services ("Services") as subscribed to per the Master Service Agreement. This Policy

More information

REGULATION BOARD OF EDUCATION FRANKLIN BOROUGH

REGULATION BOARD OF EDUCATION FRANKLIN BOROUGH R 3321/Page 1 of 6 The school district provides computer equipment, computer services, and Internet access to its pupils and staff for educational purposes only. The purpose of providing technology resources

More information

Your Right to Privacy. It s abouthope

Your Right to Privacy. It s abouthope Your Right to Privacy It s abouthope Information for Clients and Caregivers Protecting the privacy of your information at Peel Children s Centre Table of Contents We will protect the privacy of all the

More information

Inside the OCR Investigation/Audit Process 2018 PBI HEALTH LAW INSTITUTE TUESDAY, MARCH 13, 2017 GREGORY M. FLISZAR, J.D., PH.D.

Inside the OCR Investigation/Audit Process 2018 PBI HEALTH LAW INSTITUTE TUESDAY, MARCH 13, 2017 GREGORY M. FLISZAR, J.D., PH.D. Inside the OCR Investigation/Audit Process 2018 PBI HEALTH LAW INSTITUTE TUESDAY, MARCH 13, 2017 GREGORY M. FLISZAR, J.D., PH.D. HIPAA GENERAL RULE PHI may not be disclosed without patient authorization

More information

How Secure Do You Feel About Your HIPAA Compliance Plan? Daniel F. Shay, Esq.

How Secure Do You Feel About Your HIPAA Compliance Plan? Daniel F. Shay, Esq. How Secure Do You Feel About Your HIPAA Compliance Plan? Daniel F. Shay, Esq. Word Count: 2,268 Physician practices have lived with the reality of HIPAA for over twenty years. In that time, it has likely

More information

Guidelines for the Prudent Provider

Guidelines for the Prudent Provider Email Guidelines for the Prudent Provider Emily Melbourn, BS Health Services Advisory Group (HSAG) Project Manager October 12, 2016 ------------------------.... IO,UOOWJ' HSAG""""""" HSAG About Health

More information

Data Backup and Contingency Planning Procedure

Data Backup and Contingency Planning Procedure HIPAA Security Procedure HIPAA made Easy Data Backup and Contingency Planning Procedure Please fill in date implemented and updates for your facility: Goal: This document will serve as our back-up storage

More information

TITLE SOCIAL MEDIA AND COLLABORATION POLICY

TITLE SOCIAL MEDIA AND COLLABORATION POLICY DATE 9/20/2010 TITLE 408.01 SOCIAL MEDIA AND COLLABORATION POLICY ORG. AGENCY Department of Communications Approved AFT As more and more citizens in our community make the shift towards, or include the

More information

Breach Notification Assessment Tool

Breach Notification Assessment Tool Breach Notification Assessment Tool December 2006 Information and Privacy Commissioner of Ontario David Loukidelis Commissioner Ann Cavoukian, Ph.D. Commissioner This document is for general information

More information

Elements of a Swift (and Effective) Response to a HIPAA Security Breach

Elements of a Swift (and Effective) Response to a HIPAA Security Breach Elements of a Swift (and Effective) Response to a HIPAA Security Breach Susan E. Ziel, RN BSN MPH JD Krieg DeVault LLP Past President, The American Association of Nurse Attorneys Disclaimer The information

More information

Security Rule for IT Staffs. J. T. Ash University of Hawaii System HIPAA Compliance Officer

Security Rule for IT Staffs. J. T. Ash University of Hawaii System HIPAA Compliance Officer Security Rule for IT Staffs J. T. Ash University of Hawaii System HIPAA Compliance Officer jtash@hawaii.edu hipaa@hawaii.edu Disclaimer HIPAA is a TEAM SPORT and everyone has a role in protecting protected

More information

HIPAA AND SECURITY. For Healthcare Organizations

HIPAA AND  SECURITY. For Healthcare Organizations HIPAA AND EMAIL SECURITY For Healthcare Organizations Table of content Protecting patient information 03 Who is affected by HIPAA? 06 Why should healthcare 07 providers care? Email security & HIPPA 08

More information

Federal Breach Notification Decision Tree and Tools

Federal Breach Notification Decision Tree and Tools Federal Breach Notification and Tools Disclaimer This document is copyright 2009 by the Long Term Care Consortium (LTCC). These materials may be reproduced and used only by long-term health care providers

More information

Security and Privacy Breach Notification

Security and Privacy Breach Notification Security and Privacy Breach Notification Version Approval Date Owner 1.1 May 17, 2017 Privacy Officer 1. Purpose To ensure that the HealthShare Exchange of Southeastern Pennsylvania, Inc. (HSX) maintains

More information

UTAH VALLEY UNIVERSITY Policies and Procedures

UTAH VALLEY UNIVERSITY Policies and Procedures Page 1 of 5 POLICY TITLE Section Subsection Responsible Office Private Sensitive Information Facilities, Operations, and Information Technology Information Technology Office of the Vice President of Information

More information

Best Business Practices

Best  Business Practices Best Email Business Practices Department Jorge Martinez Katy Rau A guide to sending effective emails January 2012 The Hard Truth. Maxims of Business Writing No one wants to read it Almost no one will read

More information

Community Guidelines and User Agreement

Community Guidelines and User Agreement (For all Discussion Forums/Message Boards, other services on or accessible through TradeStation s web sites and for all sponsored Social Media Sites including FaceBook, Twitter, YouTube, etc. (collectively

More information

Internet, , Social Networking, Mobile Device, and Electronic Communication Policy

Internet,  , Social Networking, Mobile Device, and Electronic Communication Policy TABLE OF CONTENTS Internet, Email, Social Networking, Mobile Device, and... 2 Risks and Costs Associated with Email, Social Networking, Electronic Communication, and Mobile Devices... 2 Appropriate use

More information

PULSE TAKING THE PHYSICIAN S

PULSE TAKING THE PHYSICIAN S TAKING THE PHYSICIAN S PULSE TACKLING CYBER THREATS IN HEALTHCARE Accenture and the American Medical Association (AMA) surveyed U.S. physicians regarding their experiences and attitudes toward cybersecurity.

More information

Etiquette at GDEX

Etiquette at GDEX Email Etiquette at GDEX Why practice Email Etiquette? The use of e-mail in corporate culture is pervasive. We rarely get letters any more. Even phone calls are uncommon. But we get scores of e-mail messages

More information

DATA PROTECTION POLICY THE HOLST GROUP

DATA PROTECTION POLICY THE HOLST GROUP DATA PROTECTION POLICY THE HOLST GROUP INTRODUCTION The purpose of this document is to provide a concise policy regarding the data protection obligations of The Holst Group. The Holst Group is a data controller

More information

The ABCs of HIPAA Security

The ABCs of HIPAA Security The ABCs of HIPAA Security Daniel F. Shay, Esq 24 th Annual Health Law Institute Pennsylvania Bar Institute March 13, 2018 c. 2018 Alice G. Gosfield and Associates PC 1 Daniel F. Shay, Esq. Alice G. Gosfield

More information

Memorial Hermann Health System Eases Encryption with Zix

Memorial Hermann Health System Eases  Encryption with Zix / CASE STUDY Memorial Hermann Health System Eases Email Encryption with Zix Learn how Memorial Hermann uses ZixEncrypt to easily secure protected health information and other sensitive data Memorial Hermann

More information

NMHC HIPAA Security Training Version

NMHC HIPAA Security Training Version NMHC HIPAA Security Training 2017 Version HIPAA Data Security HIPAA Data Security is intended to provide the technical controls to ensure electronic Protected Health Information (PHI) is kept secure and

More information

Therapy Provider Portal. User Guide

Therapy Provider Portal. User Guide Therapy Provider Portal User Guide Page 2 of 16 UCare User Guide V1.7 Table of Contents I. Introduction...3 About HSM Therapy Management... 4 Terms of Use... 4 Contact Information... 6 II. Using the Therapy

More information

Security and Privacy Governance Program Guidelines

Security and Privacy Governance Program Guidelines Security and Privacy Governance Program Guidelines Effective Security and Privacy Programs start with attention to Governance. Governance refers to the roles and responsibilities that are established by

More information

Acceptable Use and Publishing Policy

Acceptable Use and Publishing Policy 1. Purpose This Policy outlines the principles, guidelines and requirements of acceptable use of and publishing to ecreators Pty Ltd (ecreators) hosting products and services. The purpose of this Policy

More information

IMPORTANT INSTRUCTIONS:

IMPORTANT INSTRUCTIONS: IMPORTANT INSTRUCTIONS: PLEASE MAIL THIS FORM ALONG WITH YOUR AUTHORIZATION AGREEMENT BACK TO US AT: THE POLYCLINIC ATTN: EHR/MYCHART 1145 BROADWAY SEATTLE, WA 98122 PLEASE ALSO PROVIDE US WITH A PHONE

More information

Putting It All Together:

Putting It All Together: Putting It All Together: The Interplay of Privacy & Security Regina Verde, MS, MBA, CHC Chief Corporate Compliance & Privacy Officer University of Virginia Health System 2017 ISPRO Conference October 24,

More information

UCL Policy on Electronic Mail ( )

UCL Policy on Electronic Mail ( ) LONDON S GLOBAL UNIVERSITY UCL Policy on Electronic Mail (EMAIL) Information Security Policy University College London Document Summary Document ID Status Information Classification Document Version TBD

More information

HIPAA For Assisted Living WALA iii

HIPAA For Assisted Living WALA iii Table of Contents The Wisconsin Assisted Living Association... ix Mission... ix Vision... ix Values... ix Acknowledgments... ix Who Should Use This Manual... x How to Use This Manual... x Updates and Forms...

More information

Each member of the St. Margaret s Community has the privilege to access Google Apps provided by the school s network

Each member of the St. Margaret s Community has the privilege to access Google Apps  provided by the school s network NETWORK APPROPRIATE USE AGREEMENT 2018-2019 We are pleased to offer students of St. Margaret s School access to our computer network for electronic mail and the Internet. To gain access to e-mail and the

More information

BERKELEY COLLEGE Social Media Policy

BERKELEY COLLEGE Social Media Policy BERKELEY COLLEGE Social Media Policy Scope This policy applies to all use of social media by Berkeley College students, faculty and staff to represent or discuss matters concerning the College and/or members

More information

CYBERSECURITY IN THE POST ACUTE ARENA AGENDA

CYBERSECURITY IN THE POST ACUTE ARENA AGENDA CYBERSECURITY IN THE POST ACUTE ARENA AGENDA 2 Introductions 3 Assessing Your Organization 4 Prioritizing Your Review 5 206 Benchmarks and Breaches 6 Compliance 0 & Cybersecurity 0 7 Common Threats & Vulnerabilities

More information

Cleveland State University General Policy for University Information and Technology Resources

Cleveland State University General Policy for University Information and Technology Resources Cleveland State University General Policy for University Information and Technology Resources 08/13/2007 1 Introduction As an institution of higher learning, Cleveland State University both uses information

More information

A Panel Discussion. Nancy Davis

A Panel Discussion. Nancy Davis A Panel Discussion 1 Nancy Davis Director of Compliance & Safety, Door County Medical Center Cathy Hansen Director, Health Information Services & Privacy Officer, St. Croix Regional Medical Center Rhonda

More information

DCU Guide to Subject Access Requests. Under Irish Data Protection Legislation

DCU Guide to Subject Access Requests. Under Irish Data Protection Legislation DCU Guide to Subject Access Requests Under Irish Data Protection Legislation Context Under section 4 of the Irish Data Protection Acts 1988 & 2003 an individual, on making a written request to DCU, may

More information

Technology Workshop HIPAA Security Risk Assessment: What s Next? January 9, 2014

Technology Workshop HIPAA Security Risk Assessment: What s Next? January 9, 2014 Technology Workshop HIPAA Security Risk Assessment: What s Next? January 9, 2014 Welcome! Thank you for joining us today. In today s call we ll cover the Security Assessment and next steps. If you want

More information

Keeping It Under Wraps: Personally Identifiable Information (PII)

Keeping It Under Wraps: Personally Identifiable Information (PII) Keeping It Under Wraps: Personally Identifiable Information (PII) Will Robinson Assistant Vice President Information Security Officer & Data Privacy Officer Federal Reserve Bank of Richmond March 14, 2018

More information

HIPAA-HITECH: Privacy & Security Updates for 2015

HIPAA-HITECH: Privacy & Security Updates for 2015 South Atlantic Regional Annual Conference Orlando, FL February 6, 2015 1 HIPAA-HITECH: Privacy & Security Updates for 2015 Darrell W. Contreras, Esq., LHRM Gregory V. Kerr, CHPC, CHC Agenda 2 OCR On-Site

More information

HIPAA Privacy and Security Training Program

HIPAA Privacy and Security Training Program Note The following HIPAA training is intended for Vendors, Business Associates, Students, Pre Approved Shadowers, and Visitors. The following training module does not provide credit for annual training

More information

HIPAA Security and Privacy Policies & Procedures

HIPAA Security and Privacy Policies & Procedures Component of HIPAA Security Policy and Procedures Templates (Updated for HITECH) Total Cost: $495 Our HIPAA Security policy and procedures template suite have 71 policies and will save you at least 400

More information

Terms Of Use AGREEMENT BETWEEN USER AND DRAKE MODIFICATION OF THESE TERMS OF USE LINKS TO THIRD PARTY WEB SITES USE OF COOKIES

Terms Of Use AGREEMENT BETWEEN USER AND DRAKE MODIFICATION OF THESE TERMS OF USE LINKS TO THIRD PARTY WEB SITES USE OF COOKIES Terms Of Use AGREEMENT BETWEEN USER AND DRAKE This website and other related websites and mobile applications (collectively referred to as "Sites") comprise various web pages and services operated by Drake

More information

Community Use Agreement

Community Use Agreement Community Use Agreement (revised 30 August 2017) This FileMaker Community Agreement ("Agreement") provides important information about your use of the FileMaker Community site (the Site ). IMPORTANT: IF

More information

STUDENTS BRING YOUR OWN DEVICE POLICY

STUDENTS BRING YOUR OWN DEVICE POLICY STUDENTS BRING YOUR OWN DEVICE POLICY CRICOS Provider Code: 03425F Table of Contents Policy Statement... 2 1. Introduction... 2 2. Key Principles... 2 3. Student BYOD Agreement... 3 4. Cost... 3 5. Student

More information

Netiquette. IT Engineering II. IT Engineering II Instructor: Ali B. Hashemi

Netiquette. IT Engineering II. IT Engineering II Instructor: Ali B. Hashemi Netiquette IT Engineering II IT Engineering II Instructor: Ali B. Hashemi 1 1 Netiquette "Netiquette" is network etiquette, the do's and don'ts of online communication. Netiquette covers both common courtesy

More information

DeMystifying Data Breaches and Information Security Compliance

DeMystifying Data Breaches and Information Security Compliance May 22-25, 2016 Los Angeles Convention Center Los Angeles, California DeMystifying Data Breaches and Information Security Compliance Presented by James Harrison OM32 5/25/2016 3:00 PM - 4:15 PM The handouts

More information

Violations of any portion of this policy may be subject to disciplinary action up to and including termination of employment.

Violations of any portion of this policy may be subject to disciplinary action up to and including termination of employment. Page 1 of 6 Policy: All computer resources are the property of Lee County and are intended to be used for approved County business purposes. Users are permitted access to the computer system to assist

More information

The Relationship Between HIPAA Compliance and Business Associates

The Relationship Between HIPAA Compliance and Business Associates The Relationship Between HIPAA Compliance and Business Associates 1 HHS Wall of Shame 20% Involved Business Associates Based on HHS Breach Portal: Breaches Affecting 500 or More Individuals, Type of Breach

More information

Terms and Conditions

Terms and Conditions 1. ACCEPTANCE OF TERMS Terms and Conditions ASME Human Powered Vehicle (HPVC) Challenge is open to all ME/Multidisciplinary Engineering and Technology undergraduate students, subject to the following Terms

More information

Terms & Conditions. Privacy, Health & Copyright Policy

Terms & Conditions. Privacy, Health & Copyright Policy 1. PRIVACY Introduction Terms & Conditions Privacy, Health & Copyright Policy When you access our internet web site you agree to these terms and conditions. Bupa Wellness Pty Ltd ABN 67 145 612 951 ("Bupa

More information

Northern Virginia Community College Social Media Guidelines

Northern Virginia Community College Social Media Guidelines Northern Virginia Community College Social Media Guidelines APRIL 2017 Table of Contents NOVA Social Media Guidelines... 3 Purpose... 3 Scope... 3 NOVA s Current Official Social Media... Error! Bookmark

More information

All other forms of social media are prohibited unless reviewed and approved prior to use by designated SFA Compliance Principal.

All other forms of social media are prohibited unless reviewed and approved prior to use by designated SFA Compliance Principal. VI.1.5. Social Media Social media is a form of electronic communication that allows individuals to create, share or exchange information and ideas with others in virtual communities and networks. When

More information