Overview
Healthcare information privacy and security have always been concerns. Before the advent of EHRs, it was certainly possible for unauthorized individuals to access health information, but it required physical travel to where the data was stored. EHRs have created multiple ways to gain access to protected healthcare information. Other concerns about privacy and security surround patient rights regarding information about their healthcare. The Health Insurance Portability and Accountability Act was passed in 1996 (with additional rules implemented in 2013) and provides a wide set of complex healthcare rules. We’ll focus on the privacy and security rules of HIPAA. HIPAA’s privacy rules cover health information in any form (electronic, paper, or oral). The security rules are more focused and cover only electronically protected health information.
While most would agree that health information privacy and security are paramount, there is less agreement on our ability to guarantee privacy and security. Additionally, we must ensure that safeguards don’t make it too difficult for authorized users to access needed information. This week will focus on healthcare information privacy and security. It will include a review of HIPAA’s privacy and security rules and healthcare IT/healthcare informatics professionals’ role in ensuring the privacy and security of health information.
Learning Objectives
Analyze the issues encountered when securing provider and consumer acceptance of health information exchange
Explain how safeguards are used to ensure the privacy and security of health information
Describe provider and consumer concerns regarding privacy and security of health information
Discuss trade-offs between protection of health information and ease of authentication and use when unique needs arise
Required Readings
Chapters: 7 & 11: Digital Health Care: Perspectives, Applications, and Cases
Case #1: Security and Vulnerability of information technology and Health Informatics Systems
This week, we covered all aspects of the security and vulnerability of information technology and health informatics systems. Through this assignment, you will position yourself in a company and identify the best practices for securing its most important assets: data and information technology infrastructure.
Data and information technology security are necessary to protect individual privacy and organization information technology assets. It is also essential to safeguard data integrity and the availability of critical information and services. The relationship between privacy and security is evident. Healthcare information managers must assess and manage the risks associated with the privacy and security of patient medical information. To prepare for this week’s assignment, write a two-page business report and:
Identify the consequences, risks, and vulnerabilities in implementing healthcare technology information systems.
Assess the scale of the threat to individual organizations’ health information and technology assets.
Discuss strategies to mitigate risks and vulnerabilities associated with the security and vulnerability of information technology and health informatics systems.
Prepare your report in a three-full-page report (title and references pages do not count toward the page count). Cite four (4) reference sources; two (2) are from peer-reviewed sources. Note that title, reference pages, and other supplemental information do not count toward the above page count.
Use APA 7th writing style to format your paper.
