- Published: December 18, 2021
- Updated: December 18, 2021
- University / College: McMaster University
- Level: Doctor of Philosophy
- Language: English
- Downloads: 22
HIPAA provides national standards so that it can “ protect the privacy and security of health information” and gives individuals the rights in relation to their health information[Sec07]. HIPAA is responsible for protecting the health information whether on paper, electronically, or orally.
Differentiate information privacy and security
HIPAA information privacy establishes standards so that it can protect medical records and the related health information that applies to the entities involved who transact or communicate electronically[Sec07]. It ensures that the patient’s information is not disclosed to anyone without the patient’s authorization; it gives the patients the right to obtain copies of their medical records. HIPPA information security rule is responsible for establishing national standards in order to protect personal information that has been created, used, received or maintained by an entity that is covered. The rule requires both physical and administrative measures put in place to ensure that there is data integrity, confidentiality and security of the electronic information.
Compare general privacy and security compliance issues
The security rule expects that the entities should implement security safeguards and goes to the extent of giving them option of deciding how the level of protection should be. On the other hand the privacy rule is more prescriptive, for example it grants the users rights in relation to their PHI. It also requires entities to comply with the administrative requirements put in place.
Identify technology-specific HIPPA security issues
To secure health information through an IT system, certain measures are supposed to be taken as a step towards safeguarding the information against unauthorized disclosure or use. The rules under HIPAA only apply to protect heath information (PHI) that is represented in electronic form. When it comes to the privacy rule; security steps are put in place to ensure entities that covered take contracts with other businesses who in turn ensure that their associates maintain the safety of PHI.
Reference
United States Department of Health and Human Services. (2007). Security Standards: Technical Safeguards. Retrieved November Friday 6, 2015, from HIPAA security series: http://www. hhs. gov/ocr/privacy/hipaa/administrative/securityrule/techsafeguards. pdf
