 |
 |
 |
|
|
HIPAA/HITECH
With passage of the Health Information Technology for Economic and Clinical
Health (HITECH) Act, enacted as part of the American Recovery and Reinvestment
Act of 2009, requirements for the handling, use, and destruction of Protected
Health Information (PHI) extended well beyond Health Insurance Portability and
Accountability Act (HIPAA) of 1996 Security and Privacy Rule mandates. HITECH’s
increased penalties for violations, addition of business associate compliance
requirements, empowerment of State Attorney Generals, and Department of Health
and Human Services (HSS) listing of breaches of unprotected PHI affecting over
500 individuals; has resulted in a renewed focus on healthcare security and
privacy.
Further, given both HIPAA Security Rule § 164.308(a)(1)(ii)(A) and Centers for
Medicare and Medicaid Services (CMS) Meaningful Use Stage 1 risk analysis
requirements, the use of third-party subject matter expertise can afford covered
entities a unique, external perspective supporting accurate and thorough
assessment. Fortrex Comprehensive Healthcare Risk Assessments (CHRA) offer
independent examinations of logical, operational, and physical risk;
quantifiable risk profile, and actionable recommendations for treatment of risks
and vulnerabilities to the confidentiality, integrity, and availability of PHI.
|
|
 |
|
|
Fortrex Tweets & Mentions
|
|
|
|
5303 Spectrum Drive,
Suite A,
Frederick, Maryland 21703-7373
1 (877)-FORTREX / (301) 977-6966 / Fax: (301) 947-3539
|