With reported health data breaches of all sizes breaking the 11,000 mark, healthcare organizations face an ongoing challenge of determining the appropriate response to a security or privacy incident, including whether individual and/or government notification is required and appropriate mitigation steps must be taken.

With these bigger breaches receiving continuing publicity, new enforcement efforts underway and ongoing changes to the overall HIPAA privacy and security rules, healthcare companies and business associates need to focus attention on managing privacy and security breaches and executing the difficult challenges that arise as a result.

Breaches affecting more than 500 records are getting a lot of publicity. However, the HHS Office for Civil Rights confirmed that that it has received more than 9,200 reports of smaller breaches.

These smaller breaches also require notice to the individual and corrective action.

Regardless of an organization's ultimate decision, harm assessments require resources and time, and covered entities would be prudent to develop procedures to make these kinds of decisions.

To help healthcare organizations more efficiently manage their harm assessment, breach notification and mitigation activities, Melamedia, LLC, publishers of Health Information Privacy/Security Alert is producing a 90-minute webinar:

In Harm's Way: Approaches to Harm Assessments under the HITECH Act

The seminar features experts with real world experience in evaluating harm in possible breach situations.

PARTICIPANTS ARE BRIEFED ON:

• Determining when the harm threshold has been crossed;

• Procedures for handling harm determinations;

• Whether breaches involving more than 500 records are different from those affecting under 500 records;

• Covered entity responsibilities in assessing harm when a breach is caused by a Business Associate or BA subcontractor; and

• Other challenges resulting from privacy and security breaches.

WHO SHOULD LISTEN

• Privacy & Security Officers
• HIPAA Business Associates & Subcontractors
• HIM Professionals
• Healthcare IT Professionals
• EHR & PHR Contractors
• Healthcare Compliance Directors
• Third Party Administrators

• Healthcare Risk Managers
• Healthcare Providers
• Healthcare Payors
• Healthcare Data Disposal Companies
• Healthcare Business Insurers
• Medical Research Administrators
• Government Healthcare Policymakers
• Healthcare Attorneys & Consultants

THE FACULTY

Kirk Nahra, JD., is a partner with Wiley Rein LLP in Washington, D.C., where he specializes in healthcare, privacy, information security and overall compliance litigation and counseling for the health care industry, insurers and others facing challenges in these areas. He is chair of the firm's Privacy Practice and co-chair of its Health Care Practice. He works with insurers and health care industry participants in developing compliance programs and defending against government investigations into their practices. He assists companies in a wide range of industries in analyzing and implementing the requirements of privacy and security laws across the country and internationally. A member of the Board of Directors of the International Association of Privacy Professionals, he is the editor of Privacy Advisor, the monthly newsletter of the International Association of Privacy Professionals.
He is a Certified Information Privacy Professional

Lesley Berkeyheiser is principal and founder of The Clayton Group, LLC, an independent health care management consulting company and a partner with the N-Tegrity Solutions Group. She has over 25 years experience in the healthcare industry. She actively participates as a WEDI SNIP Co-Chair (2007-current) and as a Security and Privacy Co-Chair for WEDi SNIP (Workgroup for Electronic Data Interchange Strategic National Implementation Process). Ms. Berkeyheiser is also content contributor and creator of HIPAA Privacy & Security Policy and Procedure Templates, CPHIMS Certification (Security & Privacy) content contributor and serves as Board Member for PrivaPlan.

Moderator: Dennis Melamed is editor and publisher of Health Information Privacy/Security Alert and an adjunct professor at the Drexel College of Medicine, where he teaches master's level courses on patient data stewardship. He recently  has served as a consultant for the National Governors Association's Center for Best Practices, where he focuses on  privacy and security issues surrounding health information exchanges.

CONTINUING EDUCATION CREDITS

• All seminar participants will receive a certificate of participation
• Event & CD Qualify for 1.5 IAPP CPE credits

REGISTRATION INFORMATION

• Registration with 1 Call-in Line: $279
• Registration with 1 Call-in Line & CD Recording: $359
• The CD recording with all course materials are excellent educational and briefing resources: $289

VISIT WWW.MELAMEDIA.COM  
or
Download the Order Form
and fax it to 703.619.4912

A GREAT EDUCATION & TRAINING TOOL: ORDER THE CD

• The CD recording with all course materials are excellent educational and briefing resources: $289

VISIT WWW.MELAMEDIA.COM  
or
Download the Order Form
and fax it to 703.619.4912

TRACK HIPAA & BREACH ENFORCEMENT

CLICK HERE To receive the HIPAA Enforcement Statistics Update Service