Running head: HEALTH INFORMATION CONFIDENTIALITY

HEALTH INFORMATION CONFIDENTIALITY

Name

Professor

Course

Institution

Date
HEALTH INFORMATION CONFIDENTIALITY 2

Both HIPAA and HITECH are systems that protect the privacy of health information.

HIPAA laws came first where it was enacted to protect health records, health insurance cover

and any other information pertaining health sector. Few years letter, HITECH law was

introduced to enhancement enforcement of HIPAA through handling of private health

information in electronic form.

However even after the introduction of such laws that govern the way in which

confidential health information is handled, there still are people who do not trust these ways of

data capture and storage. To win the trust of such persons, they should be involved in the

processes through which information is handled. They can even be provided with secure

accounts of which they can login with their own username and password and post their

information.

Benefits of confidential health data collection outweighs the risks because electronic

health records are so secure that it is difficult for information to leak, unless through ways of

malicious intentions bit this is punishable by law.

The purpose of HITECH is to promote security maintenance of information in health

sector through the use of technological innovations. This was an improvement from HIPAA,

which was using manual methods to secure health information.

The new implementation that HITECH brought in place is by involving the private

business associate in the field of health sector with the new regulations to keep health

information confidential otherwise, they will be held liable.

HEALTH INFORMATION CONFIDENTIALITY 3

The possible HIPAA violations that could occur with portable PHI is that the carriers can

be exposed to the interested groups who can obtain information they and use them with

malicious intentions.

To avoid violation of information in PHI, it is good to introduce electronic PHI (EPHI)

and train the users on how to use them to achieve confidentiality.

For an organization to comply with HIPAA, it should make sure that their clients are registered,

trained, tested, and certified.

HEALTH INFORMATION CONFIDENTIALITY 4

References

Annas, G. J. (2003). LEGAL ISSUES IN MEDICINE. Boston.: Massachusetts Medical Society.

Athenahealth. (2009). A Summary of the HITECH Act. Athenahealth, Inc.

Health Care ADVISORY. (2013). Overview of HIPAA/HITECH Act Omnibus Final Rule. New

York: ALSTON & BIRD llp.

Steimel, R. HIPAA/HITECH. Michigan: MUNSION HEALTH CARE.