Make big plans for big data
HIM-HIPAA Insider, May 12, 2014
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
What is big data? It's a way of saying there's a lot of information staring you and your organization in the face. But it's also a reality for the healthcare industry. Figuring out how to work with big data in a secure fashion is a challenge healthcare entities should prepare for, says Reece Hirsch, Esq., of the Morgan Lewis law practice in San Francisco.
"More and more vendors to the healthcare industry are starting to leverage the power of big data to develop new products and services, often relating to population-based health management," Hirsch says. "The problem is that the HIPAA rules governing those uses of PHI by business associates [BA] are often not very clear."
HIPAA has long included information and steps on de-identifying data. It has a checklist of how to de-identify data and enable an organization to use PHI to its benefit while at the same time not revealing the identity of its patients—essentially, it's stripping out identifiers throughout the process of using the PHI.
OCR has provided solid guidance on de-identification, particularly with regard to the "statistical" method of de-identification, Hirsch says. "However, business associates seeking to use big data in de-identified form often find that they haven't adequately secured the right to de-identify their customers' PHI," he notes. This is where covered entities must look for potential problems. Without a provision in a BA agreement expressly permitting de-identification, the BA may not de-identify, Hirsch warns.
Continue reading "Make big plans for big data" on the HCPro website. Subscribers to Briefings on HIPAA have free access to this article in the May issue.
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Related Products
Most Popular
- Articles
-
- Don't forget the three checks in medication administration
- Five ways to safeguard your patients' valuables
- Note similarities and differences between HCPCS, CPT® codes
- Q&A: Primary, principal, and secondary diagnoses
- The consequences of an incomplete medical record
- Reimbursement for Facility and Professional Services in a Provider-Based Department by Gina M. Reese, Esq., RN
- Skills of effective case managers
- Nursing responsibilities for managing pain
- OB services: Coding inside and outside of the package
- Practice the six rights of medication administration
- E-mailed
-
- Plan of Care Supports Documentation of Homebound Status
- Q/A: Coding infusions to correct low potassium levels
- Note from the instructor: CMS clarifies billing guidelines on proper billing for drugs in a single-dose or single-use vial, including billing for discarded drugs
- Neurological checks for head injuries
- Modifiers and medical necessity
- HIPAA Q&A: Cameras in patient rooms
- Follow these tips to properly report bladder catheter codes
- Examine cardboard boxes stored on floor to avoid infection control, life safety citations
- Differentiate between types of wound debridement
- Consider two options for coding Rho(D) immune globulin given in pregnancy
- Searched