<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=352585001801011&amp;ev=PageView&amp;noscript=1">

By not complying with the requirements laid out in NIST SP 800-171, your government contracts may be at risk. Even though the deadline for compliance was 12/31/17, it’s not too late to protect your business. Get started here

NIST Compliance - Are You Overdue? 00 : 00 : 00 : 00
Blog Feature

By: Kelser

Print this Page

June 26th, 2018

How IT in CT Can Help with HIPAA Compliance

it ct | it services Connecticut | cyber security Connecticut | IT support Connecticut | IT Connecticut | it support ct | Connecticut cyber security | data center Connecticut | it consulting Connecticut | managed services Connecticut | IT partner Connecticut | IT services CT | it services ma | it support Massachusetts | it services Massachusetts | managed services ma | managed services ct

IT CT

Privacy laws changed profoundly with the Health Insurance Portability and Accountability Act (HIPAA), which has had a major impact on the healthcare industry and IT in CT. Not only does a healthcare firm have to commit to protecting patient data--- it has to be very careful in how it uses social media.

Here are important points for businesses to remember about HIPAA compliance:

Protected Health Information

At the core of HIPAA is protected health information (PHI), which can be medical records, health insurance plans and other private information about a patient. The goal of the law is to give patients more control over who can access their medical information. PHI includes the following information:

  • Name, address, and birth date
  • Demographic data of the patient
  • Social security number
  • Current and past health conditions
  • Past, present, and future payments for healthcare services

Health organizations are required to disclose protected information only under two circumstances. The information must be presented to patients or their representatives when they request it and to HHS in the event of a compliance investigation or review. There are other exceptions, such as PHI may be disclosed to appropriate government authorities in cases of abuse or domestic violence.

HIPAA Violations

Every healthcare organization must guard against unauthorized use of PHI, including sharing pictures online that include patient information in the background. The organization must avoid sharing any form of PHI unless they have written consent from the patient. Furthermore, doctors cannot post gossip about a patient even if they don't mention their name. IT firms in CT that serve medical clients should be conscious of HIPAA rules.

Employees in the medical industry need to go through HIPAA training when they are hired. The consequences of violating HIPAA rules can be as much as fines of $1.5 million and a 10-year jail sentence. This penalty may further damage a medical career, as the medical professional is at risk of losing their medical license and possibly employment.

When communicating with a patient on social media, it's best for the doctor not to acknowledge any medical treatment or conditions related to the patient. Doctors should take such conversations offline.

Businesses Affected By HIPAA

  • Health insurance providers
  • Healthcare providers
  • Healthcare clearinghouses
  • Business associates

Conclusion

Make sure your IT consultant in CT understands HIPAA rules so that they can help ensure compliance. Failing to follow such regulations can lead to costly fines and lawsuits. Contact us at Kelser Corporation to learn more about how we can help your business with HIPAA compliance and overall IT consulting.

Security Study

About Kelser

By actively listening to the client, Kelser has consistently met the needs of its client base for over 30 years. Through attentive observation of the changing industry, Kelser is able to react quickly to provide the best service and solutions available. Thanks to the dedication of our professional staff, this agility has advanced us as leaders in our industry.