During the panel, the participants discussed what new challenges have arisen in the space of HIPAA and data security in the last five years.
Dr. Byrne, a pediatrician, mentioned some challenges associated with the data privacy for younger patients. “We still do some things in the name of privacy that are pretty darn asinine,” she said, noting privacy and data security laws “have not caught up” to the way adolescents are and how they use technology. For example, sharing information with adolescent patients’ parents through MyChart is hindered by age and consent laws, she said. The problems come up now, as opposed to five years ago, because of increasing online access to medical records.
Mr. Nanji has seen a different set of challenges arise in the last half decade. One of the main challenges he has seen is the issue of networked medical devices. “CIOs now have significant responsibility to make sure networked medical devices are secure,” he says.
Offering a legal perspective, Ms. Bushee said one of the biggest challenges with HIPAA that has arisen recently is a new requirement that hospital business associates must comply with components of HIPAA. In light of this change it has become important to “vet your vendors and do some due diligence to make sure they have policies and procedures in place” before signing a contract, she said.
More articles on HIPAA:
The individual cost of a data breach: $19k
HIPAA and Ebola: What information should be quarantined?
Five questions to ask your service provider about HIPAA compliance
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.