HIPAA Privacy and Security Rules in EHR operations, risk assessments, audit logs and access monitoring, phishing and account compromise, breach response and the analyst's responsibilities.
HIPAA in EHR operations
Slide 1 / 5
• Privacy Rule: who may use and disclose protected health information (PHI); patients' rights to access and amend their records; minimum necessary.
• Security Rule: administrative, physical and technical safeguards for electronic PHI — risk analysis, access controls, audit controls, integrity, transmission security.
• Breach Notification Rule: notify patients (and HHS, and sometimes media) of breaches of unsecured PHI.
EHR analysts implement many technical safeguards and must follow them personally.