1. Dancing
With
HIPAA
Follow
my
lead
and
you’ll
be
OK
David Harlow JD MPH
THE HARLOW GROUP LLC
blog
•
healthblawg.com
twi7er
•
@healthblawg

2. Photo: CC: http://www.flickr.com/photos/aigle_dore/6672141083

3. HIPAA
Highlights
PHI
CE
BA
Breach
No0fica0on
• Pa0ents
• Government
• Press
(>500)
Enforcement
(OCR/AGs)
• BA
Primary
Liability
• Downstream
responsibility
• Audits,
Complaint
Inves0ga0ons,
Fines
TPO
BAA
NPP
Authoriza0on/Consent
Security
• Administra0ve
• Technical
• Physical
• >>
Risk
Assessment
Privacy
• Minimum
Necessary
for
TPO
• Pa0ent
Access
• Opt-­‐In
for
Research,
Marke0ng,
Fundraising

4. Wall
of
Shame

5. Deiden>fica>on
Photo: CC: http://www.flickr.com/photos/hape_gera/3281625420

6. thedatamap.org

7. It’s
not
ALL
about
HIPAA

8. FTC
Breach
No>fica>on
Rule
for
PHRs

9. State
Rules
on
Data
Privacy
Including
“Sensi>ve”
Health
Data

10. Lockdown
vs.
Open
Door

11. Clear
Expecta0ons
=>
No
Surprises

12. The
Inevitability
of
Digital
Health

13. Photo: CC: http://www.flickr.com/photos/aigle_dore/6672141083

14.
for
contact
info
txt
dharlow
to
50500
or
scan
the
QR
code
harlowgroup.net
healthblawg.com
twiWer.com/healthblawg
david@harlowgroup.net
Thank
You
David Harlow JD MPH
THE HARLOW GROUP LLC
j.mp/HxR2014HIPAA