They are becoming as common in healthcare as a stethoscope draped around a physician's neck. Check the pocket of a doctor's white coat, and you're likely to find a mobile device, whether it be a tablet computer or a smartphone.
Technology is changing rapidly, and it's creating big challenges for healthcare organizations when it comes to protecting PHI. Privacy and security officers should keep an eye on these changes-from more mobile devices to social media to cloud computing-over the next several months, according to a group of industry prognosticators.
When Mac McMillan, CISSP, CEO of CynergisTek in Austin, TX, picked up the phone recently, he had a very nervous hospital administrator on the other end.
HIPAA and HITECH have resulted in a whole new career for Tom Dumez, CHP. As human resources director at a records management company, Dumez's job in the last few years has taken a new direction-training others how to comply with HIPAA.
One of the three foundational security requirements is availability-the ability to access data when you really need it. Data accessibility is considered sound security practice and is a requirement per the HIPAA Security Rule (45 CFR 164.306[a][1]). If a data storage device fails, you can lose access to your patients' or health plan members' PHI. This could adversely affect patient care and service to health plan members.
