- Home
- » e-Newsletters
Ask the right questions
HIPAA Training Advisor, January 11, 2006
Ask the right questions
Encryption is important for transmitting ePHI, particularly for high-risk situations such as sending it over the Internet, according to CMS. "As business practices and technology change, situations may arise where ePHI being transmitted from a covered entity would be at significant risk of being accessed by unauthorized entities." When a risk analysis shows significant risk, the CE must use encryption. To determine the need for encryption, ask yourself the following questions:
- How does your organization transmit ePHI?
- Based on your risk analysis, is encryption needed to protect ePHI during transmission?
- How often does your organization transmit ePHI?
- What methods of encryption will your organization use to protect the transmission of ePHI?
- Based on your risk analysis, is encryption needed to protect ePHI during transmission?
Develop a policy that takes into account all variables, says Farmington Hills, MI-based attorney William M. Brodhead. "And if encryption is an easy, cheap, and practical solution, use it." But keep in mind what's most important: the care and welfare of the patient, he says. Use common sense and take reasonable and appropriate steps to protect patients' information.
Editor's note: Adapted from "Factor risk, cost when choosing encryption solution," Briefings on HIPAA, December 2005.
Most Popular
- Articles
-
- Q/A: Volume requirement for reporting hydration services
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- Catch up on what's new with injections and infusions
- Topic: CMS, OESS post new security compliance review information, checklist
- What does case-mix index mean to you?
- QA:Coding multiple initial infusions
- Capturing all necessary codes for IUD insertion and removal can be challenging
- News and briefs: Oklahoma Osteopathic Association against residency bill change
- OB services: Coding inside and outside of the package
- HIPAA Q&A: Level of encryption needed for email
- E-mailed
-
- Q/A: Volume requirement for reporting hydration services
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- Catch up on what's new with injections and infusions
- New conflicts of interest create new challenges
- What does case-mix index mean to you?
- Q&A tackles coding questions about injections and infusions
- Joint Commission Center announces handoff communication solutions
- Inside best practice: Reduce patient falls with a stoplight
- Identify modifiable risk factors to prevent patient falls
- HIPAA Q&A: Level of encryption needed for email
- Searched