Skip to main content

Risk Assesment and Management of Electronic Health Information

BayBiotech.NET
Health Insurance Portability and Accountability Act of 1996 (HIPAA, Title II) required the Department of Health and Human Services (HHS) to establish national standards for the security of electronic health care information.
Department of Health and Human Services prepared certain guidelines that specify a series of administrative, technical, and physical security procedures for covered entities to use to assure the confidentiality of electronic protected health information (EPHI). This is particularly relevant for organizations that allow remote access to EPHI through portable devices or on external systems or hardware not owned or managed by the covered entity. Guidelines address mainly the privacy of health information issues that may arise by using laptops; home-based personal computers; PDAs and Smart Phones; hotel, library or other public workstations and Wireless Access Points (WAPs); USB Flash Drives and Memory Cards; floppy disks; CDs; DVDs; backup media; Email; Smart cards; and Remote Access Devices (including security hardware).
A significant emphasis and attention is paid on organization’s Risk analysis and risk management strategies; setting up Policies and procedures for safeguarding electronic data as well as Security awareness and training on the policies & procedures for safeguarding the health information if used electronically via remote access.
Main focus has been placed on the risks associated with remote access and offsite use of the EPHI into three areas: access, storage and transmission.

A good risk management planning takes all three areas into account and may vary from one organization to the other depending on the size, usage and infrastructure of the organization.

To read more about the risks assessment and management strategies suggested by HHS, follow the link: http://www.cms.hhs.gov/SecurityStandard/

Comments

Post a Comment

Popular posts from this blog

Good Machine Learning Practices

BayBiotech.NET A joint effort by FDA,  United Kingdom’s Medicines and Healthcare products Regulatory Agency (MHRA) and Health Canada have developed guiding principles to help promote utilization of medical devices that are safe and effective and utilize artiificial intelligence and machine learning. To find out more details check out the link here!
Post a Comment
Read more

Group C (Treatment IND) Drugs

BayBiotech.NET Since 1976, National Cancer Institute (NCI) in agreement with FDA has established the Group C classification system to allow access to certain drugs for the cancer patients specifically falling under a category that adequate alternative therapy or if the available alternative therapy has significant toxic effects. Each Group C drug protocol specifies patient eligibility and drug use information. Group C drugs are provided only to properly trained physicians who have registered themselves with NCI using a special form to assure that their patient qualifies under guidelines - or protocols - for the drug. Physicians using drugs under Group C have no reporting requirements to the NCI other than the obligation to report adverse drug reactions. Group C drugs are provided free of charge, and the Centers for Medicare and Medicaid Services provides coverage for care associated with Group C therapy. Making Group C drugs available to the critically ill patients not only provi...
Post a Comment
Read more

Amendments for High Risk Device Type Regulatory Pathway

BayBiotech.NET Government Accounting Office (“GAO”) has issued a long-awaited report evaluating the use of the 510(k) process by the Food and Drug Administration (“FDA” or the “Agency”) in the January of 2009. Report mainly focused on Preamendment class III devices. Although most high-risk class III medical devices are subject to the demanding premarket approval (“PMA”) process, preamendment class III devices may be cleared through the 510(k) pathway until FDA issues regulations requiring a PMA. Under the Safe Medical Devices Act of 1990, FDA was required either to reclassify preamendment class III devices into class I or II, or (2) issue regulations requiring PMA approval for the devices, GAO noted that 20 preamendment class III device types have not yet been addressed by the Agency. GAO has urged FDA to take required steps to address the remaining class III devices that continue to be eligible for 510(k) review. As a result of the report, FDA has committed to address al...
Post a Comment
Read more