Integrating Privacy and Security

Coordination benefits HIPAA compliance efforts

CHICAGO, April 2, 2008—Compliance for the Health Insurance Portability and Accountability Act (HIPAA) privacy and security regulations has been difficult for facilities to achieve and maintain because compliance efforts are meant to work in tandem, but over time have grown apart, thus reducing the efficient use of resources. Any effort to integrate security and privacy roles and responsibilities will help conserve resources, aid compliance and anticipate future information technology and legal changes, according to an article in the April issue of the Journal of AHIMA.  

The close relationship between privacy and security is identified in the HIPAA regulations. Privacy of electronic information is not possible without technology safeguards. Rules and obligations to protect health information cannot be enforced without effective access controls. In the same way, security would not be effective without privacy because it is impossible to ensure that safeguards are implemented appropriately without knowing the rights and obligations defining proper access.

An organization that coordinates its compliance efforts can maximize resources and increase effectiveness. The article explains that general factors have led to barriers in coordinating privacy and security activities. Suggestions illustrate how organizations can use resources more effectively to enhance their HIPAA compliance programs.

Read the complete article in the April issue of the Journal of AHIMA or online at www.ahima.org.

 About AHIMA

AHIMA is the leading professional Association representing more than 51,000 specially educated and certified health information management professionals working throughout the healthcare industry.  HIM professionals serve healthcare and the public by managing, analyzing, and utilizing data vital for health system management. www.ahima.org