A PRIMER FOR IT SERVICE PROVIDERS ON HEALTH CARE LEGAL ISSUES ITAA Tech Law Webcast April 11, 2003

1
A PRIMER FOR IT SERVICE PROVIDERS ON HEALTH CARE
LEGAL ISSUESITAA Tech Law WebcastApril 11, 2003

• By
• John A. Bonello
• Eidson Bonello, P.C.

2
HEALTH CARE IT OFFERINGS

• Electronic medical records
• Electronic practice management
• E prescriptions
• Coding and billing

3
Overview

• Privacy
• Security
• Liability

4
PRIVACY
5
HIPAA Privacy Rule

• Are you a business associate?
• If so, there must be a business associate
  agreement in place between the covered entity and
  the business associate

6
Business Associate Agreements

• Timing
• Required Terms
• Optional Terms

7
Required Terms

• No use/disclosure beyond contract/law
• Appropriate safeguards
• Report unauthorized use/disclosure
• Flow down of restrictions/conditions

8
Required Terms (cont.)

• Access
• Amendments
• Accounting of disclosures
• Availability of documentation re use/disclosures
• Return/destruction of PHI

9
Optional Terms

• Timing and manner of access, accounting, and
  amendments
• Responsibility for mitigation cost
• Privacy Rule assistance
• Process for access to documentation
• Parameters for return/destruction of PHI

10
Internal Obligations

• Standard Obligations
• -- agreement with downstream providers
• -- system for access, amendment, and accounting
• -- tracking use/disclosure
• Additional Obligations

11
SECURITY
12
Security Issues

• What is the standard of care?
• HIPAA Security Rule
• Federal Government

13
LIABILITY
14
How Does Liability Arise?

• Contractual obligations
• Laws, rules, and regulations
• Civil lawsuits

15
Litigation Risk Management

• Contractual limitations
• Privacy and security policies and procedures
• Other options

16
Questions or Comments

• Thank you
• John A. Bonello
• Eidson Bonello, P.C.

John_at_eblawsolutions.com 202-776-1144