Revitalize your HIPAA-HITECH Compliance Program. Benefit from ideas on how to: • Jump-start your program • Revitalize your compliance efforts • Update your program with HITECH requirements • Develop an internal benchmarking system • Implement safeguards as soon as possible • Evaluate current administrative, physical and technical safeguards

1. How To Revitalize Your HIPAA-HITECH Compliance Program
Live Webinar – Practical, Actionable Take-Aways
Thursday, August 26, 2010
(2:30 CT, 1:30 MT, 12:30 PT)
Duration: 60-90 minutes
Register Now! … The deadline for HIPAA Security Rule compliance for Covered Entities (CEs) was April 2005!
In more modern times, Business Associates (BAs) become statutorily obligated to comply with the law in February
2010. The Health Information Technology for Economic and Clinical Health (HITECH) Act, which was enacted as
part of the American Recovery and Reinvestment Act (ARRA) of 2009, significantly modified and strengthened
many aspects of the HIPAA Security Rule (and Privacy Rule), including the penalties that the U.S. Department of
Health and Human Services (HHS) could impose for violations of the HIPAA rules.
New proposed rules issued in July would establish requirements for CEs and BAs to have Business Associate-type
contracts with their downstream suppliers (subcontractors) who handle electronic Protected Health Information.
If you receive, store, process or transmit ePHI, you need to attend this webinar. No matter where you are in your
HIPAA-HITECH compliance journey, you will benefit from ideas on how to:
• Jump-start your program
• Revitalize your compliance efforts
• Update your program with HITECH requirements
• Develop an internal benchmarking system
• Implement safeguards as soon as possible
• Evaluate current administrative, physical and technical safeguards
Many CEs have ignored the law for the last five years. A majority of BAs are not even aware of their new
obligations under the law. Will compliance change? -- Most experts think so and so do we! The Health Information
Technology for Economic and Clinical Health (HITECH) Act has been called a "game changer" because it
significantly strengthens many aspects of the HIPAA Security Rule (and Privacy Rule), including the penalties that
the U.S. Department of Health and Human Services (HHS) could impose for violations of the HIPAA rules as well as
enforcement. As a visible demonstration of seriousness, HHS has begun posting Data Breach
Notifications/Violations, required by law, on its web site.
One huge change driven by The HITECH Act is that Business Associates are now statutorily obligated to comply
with all relevant sections of the law.
If you are a “Business Associate” or “Covered Entity” or a “subcontractor” who handles ePHI, it’s time to get
serious.
Who Should Attend?
Business leaders and managers with responsibility for HIPAA-HITECH Privacy and Security compliance should
attend. CEOs, COOs, CFOs, Chief Compliance Officers, Chief Risk Officers, Chief Privacy Officers, Chief Security
Officers, Chief Information Officers.
Agenda:
This session is offered as a 60-90-minute webinar using the GoToWebinar platform. The open format encourages
questions during and after the session. Attendees will receive the presentation materials.

2. How To Revitalize Your HIPAA-HITECH Compliance Program
Live Webinar – Practical, Actionable Take-Aways
Thursday, August 26, 2010
(2:30 CT, 1:30 MT, 12:30 PT)
Duration: 60-90 minutes
Register Now! … In this live session, attendees will:
• Review the HIPAA Security Final Rule
• Learn about major changes brought about by The HITECH Act
• Learn about the new Civil Monetary Penalty System
• Learn practical, actionable steps to take today to revitalize their HIPAA Compliance Programs
This webinar is designed to help CEs and BAs understand and act on the major changes brought about by The
HITECH Act and help these organizations get started on their HIPAA-HITECH compliance programs.
About the Presenter: Bob Chaput, MA, CHP, CHSS, MCSE
Bob is president of HITECH Security Advisors LLC and Data Mountain LLC. Both firms help organizations manage
increasingly more significant business risks associated with the protection of personally identifiable information.
Over the past 30 years, Bob has worked as an educator, an executive and an entrepreneur. He has assisted
businesses and individuals in developing highly secure information technology (IT) strategies that are tightly linked
with their business strategies and goals. His workshops, seminars, writings and consultations reflect his
knowledge, humor, enthusiasm and vision.
Bob is no stranger to managing and protecting large amounts of data – his experience includes managing some of
the world’s largest healthcare data sets, requiring the highest levels of security and privacy. Bob’s experience as a
CIO and general manager leading global organizations at GE, Johnson & Johnson and Healthways for 30 years
equips him to help others make critical decisions about information technology and implement more sound and
secure data protection solutions. His 30-year career includes 25 years of responsibility for online data backup and
recovery, disaster recovery and business continuity planning, with 20 of those years spanning the highly data-
regulated healthcare industry.
He holds undergraduate and graduate degrees in mathematics, numerous technical certifications and is a Certified
HIPAA Professional (CHP) and a Certified HIPAA Security Specialist (CHSS).
bob.chaput@HIPAASecurityAssessment.com
http://www.HIPAASecurityAssessment.com
(615) 496-4891
Follow Bob on Twitter: http://twitter.com/BobChaput
Connect with Bob: http://www.LinkedIn.com/in/BobChaput