Health information privacy and security

• Health Insurance Portability & Accountability Act (HIPAA) passed in 1996.

• The American Recovery and Reinvestment Act of 2009 (ARRA), and the HITECH Act which accompanied it,
both brought about changes designed to improve privacy and security measures required by modern
technologies

Basic Security Principles

• Confidentiality refers to the prevention of data.

• Availability refers to system and network accessibility.

• Integrity describes the trustworthiness and permanence of data.

HIPAA Meaningful Use And HITECH Act

• HIPAA security was minimal and without any meaningful enforcement mechanisms. HITECH created penalties
for non-compliance to protect the security of patient information.

• This system is transforming to technology-driven solutions through the use of electronic medical records
(EMRs), clinical decision support systems (CDSS) and health information technology (HIT).

• EHR and related systems that have the capability meaningful use to quickly retrieve patient data and records,
saving time, preventing duplication of treatment efforts, reducing drug interactions and contraindication
situations; generally improving patient care and reducing administrative costs associated with paper records.

Three Stages of HIPAA Meaningful Use

• Data capture and sharing

• Advanced clinical processes
• Improved outcomes
 Health Information Technology for Economic and Clinical Health (HITECH)

HITECH Act lies in how it incentivized the healthcare industry to transition from paper to digital medical records.

Strengthened the HIPAA Privacy and Security Rules concerning EHRs by mandating security audits of
healthcare providers.

The HITECH Act’s goals:

• Incentivizing more healthcare providers to adopt EHR
systems
• Plugging HIPAA loopholes
• Ensuring Business Associates of covered entities comply
with HIPAA rules and regulations
• Notifying patients when their PHI gets compromised
• Enforcing prohibitive penalties for HIPAA non-compliance
• Improving the quality, safety, and efficiency of healthcare
provided in a HIPAA-compliant manner
HITECH Meaningful Use
• Improving quality, safety, and efficiency of services
• Reducing health disparities
• Engaging patients and their families
• Improving care coordination
• Improving overall public health
• Ensuring privacy and security protection of PHI