HIPAA and COVID19

VSee
VSeeVSee
HIPAA and COVID19
Presented by: David A. Ginsberg, President, PrivaPlan Associates, Inc
Copyright PrivaPlan® Associates, Inc. 2020
Overview
• Workforce repositioning to their homes creates
new HIPAA Privacy and Security challenges
• Telemedicine adds to these challenges
• What is the enforcement discretion?
• What are best practices for telemedicine and work
from home
HIPAA Enforcement Discretion
Why?
“COVID-19 nationwide public health emergency
We are empowering medical providers to serve patients wherever
they are during this national public health emergency. We are
especially concerned about reaching those most at risk, including
older persons and persons with disabilities. – Roger Severino, OCR
Director.”
HIPAA Enforcement Discretion
• This is NOT a blanket waiver of HIPAA!
• Similar discretion has been issued for other emergencies
like recent Hurricanes
• Let’s examine the discretion
Enforcement Discretion
“A covered health care provider that wants to use audio or video
communication technology to provide telehealth to patients during the COVID-
19 nationwide public health emergency can use any non-public facing remote
communication product that is available to communicate with patients. OCR is
exercising its enforcement discretion to not impose penalties for
noncompliance with the HIPAA Rules in connection with the good faith
provision of telehealth using such non-public facing audio or video
communication products during the COVID-19 nationwide public health
emergency. This exercise of discretion applies to telehealth provided for any
reason, regardless of whether the telehealth service is related to the diagnosis
and treatment of health conditions related to COVID-19.”
Enforcement Discretion
“Under this Notice, covered health care providers may use popular applications
that allow for video chats, including Apple FaceTime, Facebook Messenger
video chat, Google Hangouts video, or Skype, to provide telehealth without risk
that OCR might seek to impose a penalty for noncompliance with the HIPAA
Rules related to the good faith provision of telehealth during the COVID-19
nationwide public health emergency.
Providers are encouraged to notify patients that these third-party applications
potentially introduce privacy risks, and providers should enable all available
encryption and privacy modes when using such applications. ”
My emphasis—enable all available encryption and privacy modes
Enforcement Discretion
“Under this Notice, however, Facebook Live, Twitch, TikTok, and similar video
communication applications are public facing, and should not be used in the
provision of telehealth by covered health care providers.
Covered health care providers that seek additional privacy protections for
telehealth while using video communication products should provide such
services through technology vendors that are HIPAA compliant and will enter
into HIPAA business associate agreements (BAAs) in connection with the
provision of their video communication products. ”
The last statement is very important
Enforcement Discretion
• The Notice goes on to define technologies that are HIPAA compliant and
will sign a BAA
• If you don’t obtain a BAA the enforcement discretion means the OCR will
not find this a compliance violation….but we believe this is a slippery slope
because you need to ensure that once the emergency is lifted you obtain
compliant technology
“Under this Notice, however, OCR will not impose penalties
against covered health care providers for the lack of a BAA with
video communication vendors or any other noncompliance with
the HIPAA Rules that relates to the good faith provision of
telehealth services during the COVID-19 nationwide public health
emergency. ”
Best Practices
• If you will have more of your workforce work from home what
is necessary?
• Acceptable home use policy agreements-some key points:
• Ensure homeWIFI is secured with WPA2 encryption
• Work from as private an area at home as possible-and don’t
allow family members to overhear, shoulder surf or see your
workstation or smartphone displays
Best Practices
• Always log off when you get up and leave your workstation or
smartphone at home unattended-and this is not a screen saver
but log off
• Don’t use sticky notes or write down your passwords and keep
them near the workstation
• Don’t use personal computers without permission
• Don’t save data on media
• Don’t print protected health information to a local printer
unless the printed material is immediately secured….
Best Practices
• The same restrictions on texting and email apply for home use
as at your medical practice
• Disable Alexa, Nest, Google, Siri and any assistive technology
if discussing PHI with a co-worker, or for telemedicine sessions
• Enable session security if using a teleconferencing platform
Platform security-telemedicine
Generally, the moderator has numerous controls on most
platforms (Zoom, Gotomeeting, BlueJeans,Webex etc.) like:
• Enabling end to end encryption
• Requiring a password
• Creating a waiting room and then inviting the patient
• Locking a session once it has started
• Restricting chats, or enforcing encrypted chats
• Disabling patient recording—VERY IMPORTANT!!
• Temporarily pausing a screen when a new window is opened
Telemedicine-Privacy
• At least for the first patient encounter, ask and document
patient consent to using this technology
• Ask if the patient is in a private area and if not confirm they are
comfortable continuing
• Document time and duration and follow all appropriate clinical
documentation standards
Questions?
David Ginsberg
dginsberg@privaplan.com
877-218-7707
1 sur 14

Recommandé

Telemedicine 101: Getting Started par
Telemedicine 101: Getting StartedTelemedicine 101: Getting Started
Telemedicine 101: Getting StartedVSee
1.3K vues14 diapositives
Getting Started With Telemedicine #3 - Reimbursement par
Getting Started With Telemedicine #3 - ReimbursementGetting Started With Telemedicine #3 - Reimbursement
Getting Started With Telemedicine #3 - ReimbursementVSee
584 vues20 diapositives
Panel: Telemedicine in Practice - Richard Thorp, MD par
Panel: Telemedicine in Practice - Richard Thorp, MDPanel: Telemedicine in Practice - Richard Thorp, MD
Panel: Telemedicine in Practice - Richard Thorp, MDVSee
531 vues30 diapositives
Legal developments for telehealth amid covid 19 par
Legal developments for telehealth amid covid 19Legal developments for telehealth amid covid 19
Legal developments for telehealth amid covid 19VSee
570 vues21 diapositives
Getting Started With Telemedicine Visit par
Getting Started With Telemedicine VisitGetting Started With Telemedicine Visit
Getting Started With Telemedicine VisitVSee
623 vues14 diapositives
Physician Panel on Practicing Virtual Care: Marc Dean, MD par
Physician Panel on Practicing Virtual Care: Marc Dean, MDPhysician Panel on Practicing Virtual Care: Marc Dean, MD
Physician Panel on Practicing Virtual Care: Marc Dean, MDVSee
464 vues13 diapositives

Contenu connexe

Tendances

How Telemedicine Reimbursement Works par
How Telemedicine Reimbursement WorksHow Telemedicine Reimbursement Works
How Telemedicine Reimbursement WorksGlen McCracken MD,MBA
1.1K vues31 diapositives
Insights2020 cpt changes par
Insights2020 cpt changesInsights2020 cpt changes
Insights2020 cpt changesBen Quirk
129 vues17 diapositives
GoTelecare Overview Presentation par
GoTelecare Overview Presentation GoTelecare Overview Presentation
GoTelecare Overview Presentation Alex Marz
1K vues32 diapositives
GoTelecare Franchise & Services Overview par
GoTelecare Franchise & Services Overview GoTelecare Franchise & Services Overview
GoTelecare Franchise & Services Overview Alex Marz
661 vues23 diapositives
Overcoming Telehealth Barriers to Mobilize Your Practice and Maximize Revenue par
Overcoming Telehealth Barriers to Mobilize Your Practice and Maximize RevenueOvercoming Telehealth Barriers to Mobilize Your Practice and Maximize Revenue
Overcoming Telehealth Barriers to Mobilize Your Practice and Maximize RevenueKareo
167 vues29 diapositives
Coroporate Practice of Medicine - Telemedicine par
Coroporate Practice of Medicine - TelemedicineCoroporate Practice of Medicine - Telemedicine
Coroporate Practice of Medicine - TelemedicineAlex Marz
564 vues6 diapositives

Tendances(20)

Insights2020 cpt changes par Ben Quirk
Insights2020 cpt changesInsights2020 cpt changes
Insights2020 cpt changes
Ben Quirk129 vues
GoTelecare Overview Presentation par Alex Marz
GoTelecare Overview Presentation GoTelecare Overview Presentation
GoTelecare Overview Presentation
Alex Marz1K vues
GoTelecare Franchise & Services Overview par Alex Marz
GoTelecare Franchise & Services Overview GoTelecare Franchise & Services Overview
GoTelecare Franchise & Services Overview
Alex Marz661 vues
Overcoming Telehealth Barriers to Mobilize Your Practice and Maximize Revenue par Kareo
Overcoming Telehealth Barriers to Mobilize Your Practice and Maximize RevenueOvercoming Telehealth Barriers to Mobilize Your Practice and Maximize Revenue
Overcoming Telehealth Barriers to Mobilize Your Practice and Maximize Revenue
Kareo167 vues
Coroporate Practice of Medicine - Telemedicine par Alex Marz
Coroporate Practice of Medicine - TelemedicineCoroporate Practice of Medicine - Telemedicine
Coroporate Practice of Medicine - Telemedicine
Alex Marz564 vues
5 Business Strategies to Grow Your Telehealth Enterprise par VSee
5 Business Strategies to Grow Your Telehealth Enterprise5 Business Strategies to Grow Your Telehealth Enterprise
5 Business Strategies to Grow Your Telehealth Enterprise
VSee1.5K vues
Deep Dive Into Telehealth Adoption Covid 19 and Beyond | Doreen Amatelli Clark par VSee
Deep Dive Into Telehealth Adoption  Covid 19 and Beyond  | Doreen Amatelli ClarkDeep Dive Into Telehealth Adoption  Covid 19 and Beyond  | Doreen Amatelli Clark
Deep Dive Into Telehealth Adoption Covid 19 and Beyond | Doreen Amatelli Clark
VSee588 vues
Telemedicine at Neighbourhood Family Practice par VSee
Telemedicine at Neighbourhood Family PracticeTelemedicine at Neighbourhood Family Practice
Telemedicine at Neighbourhood Family Practice
VSee435 vues
Alaya Care Covid-19 virtual care par TrustRobin
Alaya Care   Covid-19 virtual careAlaya Care   Covid-19 virtual care
Alaya Care Covid-19 virtual care
TrustRobin135 vues
How To Go From Telehealth Startup To Telehealth Enterprise par VSee
How To Go From Telehealth Startup To Telehealth EnterpriseHow To Go From Telehealth Startup To Telehealth Enterprise
How To Go From Telehealth Startup To Telehealth Enterprise
VSee251 vues
Enforcement Discretion for Telehealth Remote Communications during COVID-19 par VSee
Enforcement Discretion for Telehealth Remote Communications during COVID-19Enforcement Discretion for Telehealth Remote Communications during COVID-19
Enforcement Discretion for Telehealth Remote Communications during COVID-19
VSee207 vues
Coronavirus telehealth policy fact sheet Mar17 2020 par VSee
Coronavirus telehealth policy fact sheet Mar17 2020Coronavirus telehealth policy fact sheet Mar17 2020
Coronavirus telehealth policy fact sheet Mar17 2020
VSee171 vues
Telemedicine SW Clinical Society par David Voran
Telemedicine SW Clinical Society Telemedicine SW Clinical Society
Telemedicine SW Clinical Society
David Voran563 vues
The Expanding World of Telehealth par IVCi, LLC
The Expanding World of TelehealthThe Expanding World of Telehealth
The Expanding World of Telehealth
IVCi, LLC1.5K vues
Secrets To Marketing Telehealth To Your Patients par VSee
Secrets To Marketing Telehealth To Your PatientsSecrets To Marketing Telehealth To Your Patients
Secrets To Marketing Telehealth To Your Patients
VSee1.6K vues
Reimbursement to Value in Telehealth - Richelle Marting - Coding & Billing par KC Digital Drive
Reimbursement to Value in Telehealth - Richelle Marting - Coding & BillingReimbursement to Value in Telehealth - Richelle Marting - Coding & Billing
Reimbursement to Value in Telehealth - Richelle Marting - Coding & Billing
KC Digital Drive126 vues

Similaire à HIPAA and COVID19

Why Secure Texting is Failing Hospitals par
Why Secure Texting is Failing HospitalsWhy Secure Texting is Failing Hospitals
Why Secure Texting is Failing HospitalsTelmediq
344 vues31 diapositives
Introduction to Telepsychology Part 2 par
Introduction to Telepsychology Part 2Introduction to Telepsychology Part 2
Introduction to Telepsychology Part 2John Gavazzi, PsyD, ABPP
194 vues28 diapositives
CAHU EXPO Grove City, OH 2014 par
CAHU EXPO Grove City, OH 2014 CAHU EXPO Grove City, OH 2014
CAHU EXPO Grove City, OH 2014 Jason Karn
900 vues48 diapositives
How telemedicine help your practice? par
How telemedicine help your practice?How telemedicine help your practice?
How telemedicine help your practice?Genix technologies - DrCare247
204 vues13 diapositives
Lesson 1 Setting Up Your Video-Based Office for Telehealth.pptx par
Lesson 1 Setting Up Your Video-Based Office for Telehealth.pptxLesson 1 Setting Up Your Video-Based Office for Telehealth.pptx
Lesson 1 Setting Up Your Video-Based Office for Telehealth.pptxMarlene Maheu
194 vues34 diapositives
Data Breaches and Security: Ditching Data Disasters-Michael McNeil, Philips H... par
Data Breaches and Security: Ditching Data Disasters-Michael McNeil, Philips H...Data Breaches and Security: Ditching Data Disasters-Michael McNeil, Philips H...
Data Breaches and Security: Ditching Data Disasters-Michael McNeil, Philips H...IT Network marcus evans
639 vues33 diapositives

Similaire à HIPAA and COVID19(20)

Why Secure Texting is Failing Hospitals par Telmediq
Why Secure Texting is Failing HospitalsWhy Secure Texting is Failing Hospitals
Why Secure Texting is Failing Hospitals
Telmediq344 vues
CAHU EXPO Grove City, OH 2014 par Jason Karn
CAHU EXPO Grove City, OH 2014 CAHU EXPO Grove City, OH 2014
CAHU EXPO Grove City, OH 2014
Jason Karn900 vues
Lesson 1 Setting Up Your Video-Based Office for Telehealth.pptx par Marlene Maheu
Lesson 1 Setting Up Your Video-Based Office for Telehealth.pptxLesson 1 Setting Up Your Video-Based Office for Telehealth.pptx
Lesson 1 Setting Up Your Video-Based Office for Telehealth.pptx
Marlene Maheu194 vues
Data Breaches and Security: Ditching Data Disasters-Michael McNeil, Philips H... par IT Network marcus evans
Data Breaches and Security: Ditching Data Disasters-Michael McNeil, Philips H...Data Breaches and Security: Ditching Data Disasters-Michael McNeil, Philips H...
Data Breaches and Security: Ditching Data Disasters-Michael McNeil, Philips H...
SimplePractice Telehealth eBook par TJ Laher
SimplePractice Telehealth eBookSimplePractice Telehealth eBook
SimplePractice Telehealth eBook
TJ Laher366 vues
Managing Fraud and Compliance in Healthcare par Mike Wons
Managing Fraud and Compliance in HealthcareManaging Fraud and Compliance in Healthcare
Managing Fraud and Compliance in Healthcare
Mike Wons390 vues
Managing Compliance in Healthcare par Mike Wons
Managing Compliance in HealthcareManaging Compliance in Healthcare
Managing Compliance in Healthcare
Mike Wons402 vues
How to avoid being caught out by HIPAA compliance? par Lepide USA Inc
How to avoid being caught out by HIPAA compliance?How to avoid being caught out by HIPAA compliance?
How to avoid being caught out by HIPAA compliance?
Lepide USA Inc374 vues
COVID & telehealth disruption par FastTrack20
COVID & telehealth disruptionCOVID & telehealth disruption
COVID & telehealth disruption
FastTrack2030 vues
Presentation 220 richard strozewski building an als telehealth support syst... par The ALS Association
Presentation 220  richard strozewski building an als telehealth  support syst...Presentation 220  richard strozewski building an als telehealth  support syst...
Presentation 220 richard strozewski building an als telehealth support syst...
Best Practices for TelehealthALLURA L. RALSTON, M.A.DEP.docx par jasoninnes20
Best Practices for TelehealthALLURA L. RALSTON, M.A.DEP.docxBest Practices for TelehealthALLURA L. RALSTON, M.A.DEP.docx
Best Practices for TelehealthALLURA L. RALSTON, M.A.DEP.docx
jasoninnes202 vues
Best Practices for TelehealthALLURA L. RALSTON, M.A.DEP.docx par richardnorman90310
Best Practices for TelehealthALLURA L. RALSTON, M.A.DEP.docxBest Practices for TelehealthALLURA L. RALSTON, M.A.DEP.docx
Best Practices for TelehealthALLURA L. RALSTON, M.A.DEP.docx
HIPAA Changes for 2022 and Beyond - Today's and Tomorrow's HIPAA Compliance par Conference Panel
HIPAA Changes for 2022 and Beyond - Today's and Tomorrow's HIPAA ComplianceHIPAA Changes for 2022 and Beyond - Today's and Tomorrow's HIPAA Compliance
HIPAA Changes for 2022 and Beyond - Today's and Tomorrow's HIPAA Compliance
Telehealth Clinical Best Practices Part I June 13, 2020 par Marlene Maheu
Telehealth Clinical Best Practices Part I June 13, 2020Telehealth Clinical Best Practices Part I June 13, 2020
Telehealth Clinical Best Practices Part I June 13, 2020
Marlene Maheu757 vues
iTel Brochure 2015 par Ron Richard
iTel Brochure 2015 iTel Brochure 2015
iTel Brochure 2015
Ron Richard202 vues
Telemedicine software platform for hospitals & healthcare providers an ul... par AndrewSebastian17
Telemedicine software platform for hospitals & healthcare providers an ul...Telemedicine software platform for hospitals & healthcare providers an ul...
Telemedicine software platform for hospitals & healthcare providers an ul...
Mobile Device Security par Ben Quirk
Mobile Device SecurityMobile Device Security
Mobile Device Security
Ben Quirk340 vues
767W Redo_Telehealth Jobs from Home.pptx par Marlene Maheu
767W Redo_Telehealth Jobs from Home.pptx767W Redo_Telehealth Jobs from Home.pptx
767W Redo_Telehealth Jobs from Home.pptx
Marlene Maheu30 vues

Plus de VSee

Building A Chronic Care Management Program That Can Scale par
Building A Chronic Care Management Program That Can ScaleBuilding A Chronic Care Management Program That Can Scale
Building A Chronic Care Management Program That Can ScaleVSee
1.5K vues41 diapositives
Deploying Telehealth to 1.2 M Users - LA County Case Study par
Deploying Telehealth to 1.2 M Users  - LA County Case StudyDeploying Telehealth to 1.2 M Users  - LA County Case Study
Deploying Telehealth to 1.2 M Users - LA County Case StudyVSee
309 vues12 diapositives
Patient Engagement Strategies for Post COVID Success - Chris Nicholson | mPul... par
Patient Engagement Strategies for Post COVID Success - Chris Nicholson | mPul...Patient Engagement Strategies for Post COVID Success - Chris Nicholson | mPul...
Patient Engagement Strategies for Post COVID Success - Chris Nicholson | mPul...VSee
720 vues28 diapositives
Designing Hospital Telehealth Beyond COVID - Supporting Document par
Designing Hospital Telehealth Beyond COVID - Supporting DocumentDesigning Hospital Telehealth Beyond COVID - Supporting Document
Designing Hospital Telehealth Beyond COVID - Supporting DocumentVSee
1.1K vues5 diapositives
Designing Hospital Telehealth Beyond COVID - ARMC Virtual Visit par
Designing Hospital Telehealth Beyond COVID - ARMC Virtual VisitDesigning Hospital Telehealth Beyond COVID - ARMC Virtual Visit
Designing Hospital Telehealth Beyond COVID - ARMC Virtual VisitVSee
956 vues7 diapositives
How to implement Telemedicine into your practice par
How to implement Telemedicine into your practiceHow to implement Telemedicine into your practice
How to implement Telemedicine into your practiceVSee
530 vues41 diapositives

Plus de VSee(18)

Building A Chronic Care Management Program That Can Scale par VSee
Building A Chronic Care Management Program That Can ScaleBuilding A Chronic Care Management Program That Can Scale
Building A Chronic Care Management Program That Can Scale
VSee1.5K vues
Deploying Telehealth to 1.2 M Users - LA County Case Study par VSee
Deploying Telehealth to 1.2 M Users  - LA County Case StudyDeploying Telehealth to 1.2 M Users  - LA County Case Study
Deploying Telehealth to 1.2 M Users - LA County Case Study
VSee309 vues
Patient Engagement Strategies for Post COVID Success - Chris Nicholson | mPul... par VSee
Patient Engagement Strategies for Post COVID Success - Chris Nicholson | mPul...Patient Engagement Strategies for Post COVID Success - Chris Nicholson | mPul...
Patient Engagement Strategies for Post COVID Success - Chris Nicholson | mPul...
VSee720 vues
Designing Hospital Telehealth Beyond COVID - Supporting Document par VSee
Designing Hospital Telehealth Beyond COVID - Supporting DocumentDesigning Hospital Telehealth Beyond COVID - Supporting Document
Designing Hospital Telehealth Beyond COVID - Supporting Document
VSee1.1K vues
Designing Hospital Telehealth Beyond COVID - ARMC Virtual Visit par VSee
Designing Hospital Telehealth Beyond COVID - ARMC Virtual VisitDesigning Hospital Telehealth Beyond COVID - ARMC Virtual Visit
Designing Hospital Telehealth Beyond COVID - ARMC Virtual Visit
VSee956 vues
How to implement Telemedicine into your practice par VSee
How to implement Telemedicine into your practiceHow to implement Telemedicine into your practice
How to implement Telemedicine into your practice
VSee530 vues
Telehealth Community Partnership par VSee
Telehealth Community PartnershipTelehealth Community Partnership
Telehealth Community Partnership
VSee444 vues
LA County Spanish/English patient instruction par VSee
LA County Spanish/English patient instructionLA County Spanish/English patient instruction
LA County Spanish/English patient instruction
VSee1.3K vues
Getting Started With Telemedicine #2 - Malpractice | Webinar Series par VSee
Getting Started With Telemedicine #2 - Malpractice | Webinar SeriesGetting Started With Telemedicine #2 - Malpractice | Webinar Series
Getting Started With Telemedicine #2 - Malpractice | Webinar Series
VSee945 vues
Telemedicine Solution for Coronavirus (COVID19) par VSee
Telemedicine Solution for Coronavirus (COVID19)Telemedicine Solution for Coronavirus (COVID19)
Telemedicine Solution for Coronavirus (COVID19)
VSee146 vues
Telemedicine Solutions To Fight Coronavirus par VSee
Telemedicine Solutions To Fight CoronavirusTelemedicine Solutions To Fight Coronavirus
Telemedicine Solutions To Fight Coronavirus
VSee909 vues
How AI Drives Better Healthcare: Should doctors fear AI? - Geoff Rutledge, MD... par VSee
How AI Drives Better Healthcare: Should doctors fear AI? - Geoff Rutledge, MD...How AI Drives Better Healthcare: Should doctors fear AI? - Geoff Rutledge, MD...
How AI Drives Better Healthcare: Should doctors fear AI? - Geoff Rutledge, MD...
VSee592 vues
Future of Clinical Documentation: AI, Automation, Virtual Scribing... par VSee
Future of Clinical Documentation: AI, Automation, Virtual Scribing...Future of Clinical Documentation: AI, Automation, Virtual Scribing...
Future of Clinical Documentation: AI, Automation, Virtual Scribing...
VSee548 vues
Telehealth Secrets 2019: Finding Patients: The Power of Search Marketing - Ch... par VSee
Telehealth Secrets 2019: Finding Patients: The Power of Search Marketing - Ch...Telehealth Secrets 2019: Finding Patients: The Power of Search Marketing - Ch...
Telehealth Secrets 2019: Finding Patients: The Power of Search Marketing - Ch...
VSee456 vues
Telehealth Secrets 2019: Breaking down barriers to Oral Health: Teledentistry... par VSee
Telehealth Secrets 2019: Breaking down barriers to Oral Health: Teledentistry...Telehealth Secrets 2019: Breaking down barriers to Oral Health: Teledentistry...
Telehealth Secrets 2019: Breaking down barriers to Oral Health: Teledentistry...
VSee343 vues
Telehealth Secrets 2019: Transforming Cognitive Health through Telemedicine -... par VSee
Telehealth Secrets 2019: Transforming Cognitive Health through Telemedicine -...Telehealth Secrets 2019: Transforming Cognitive Health through Telemedicine -...
Telehealth Secrets 2019: Transforming Cognitive Health through Telemedicine -...
VSee435 vues
Telehealth Secrets 2019: Advancing Super-Consultancy Services in Major Life T... par VSee
Telehealth Secrets 2019: Advancing Super-Consultancy Services in Major Life T...Telehealth Secrets 2019: Advancing Super-Consultancy Services in Major Life T...
Telehealth Secrets 2019: Advancing Super-Consultancy Services in Major Life T...
VSee93 vues
Telehealth Secrets 2019: Whose Pain is it anyways? - Susan Mazer, PhD, Healin... par VSee
Telehealth Secrets 2019: Whose Pain is it anyways? - Susan Mazer, PhD, Healin...Telehealth Secrets 2019: Whose Pain is it anyways? - Susan Mazer, PhD, Healin...
Telehealth Secrets 2019: Whose Pain is it anyways? - Susan Mazer, PhD, Healin...
VSee94 vues

Dernier

AI in Healthcare SKH 25 Nov 23 par
AI in Healthcare SKH 25 Nov 23AI in Healthcare SKH 25 Nov 23
AI in Healthcare SKH 25 Nov 23Vaikunthan Rajaratnam
33 vues140 diapositives
Smart Devices in Medical Field.pptx par
Smart Devices in Medical Field.pptxSmart Devices in Medical Field.pptx
Smart Devices in Medical Field.pptxvineetchaudhary87
6 vues18 diapositives
Parkinson’s Disease | Athulya Assisted Living par
 Parkinson’s Disease | Athulya Assisted Living  Parkinson’s Disease | Athulya Assisted Living
Parkinson’s Disease | Athulya Assisted Living Athulya Assisted Living
8 vues8 diapositives
Treat Hearing Problems with the Best Audiologist and Aids in Kolkata par
Treat Hearing Problems with the Best Audiologist and Aids in KolkataTreat Hearing Problems with the Best Audiologist and Aids in Kolkata
Treat Hearing Problems with the Best Audiologist and Aids in KolkataHappyears
14 vues17 diapositives
CONGESTIVE HEART FAILURE.pptx par
CONGESTIVE HEART FAILURE.pptxCONGESTIVE HEART FAILURE.pptx
CONGESTIVE HEART FAILURE.pptxShagufta Farooqui
108 vues20 diapositives
Communication and NPR Presentation.pptx par
Communication and NPR Presentation.pptxCommunication and NPR Presentation.pptx
Communication and NPR Presentation.pptxWinnie
8 vues66 diapositives

Dernier(20)

Treat Hearing Problems with the Best Audiologist and Aids in Kolkata par Happyears
Treat Hearing Problems with the Best Audiologist and Aids in KolkataTreat Hearing Problems with the Best Audiologist and Aids in Kolkata
Treat Hearing Problems with the Best Audiologist and Aids in Kolkata
Happyears14 vues
Communication and NPR Presentation.pptx par Winnie
Communication and NPR Presentation.pptxCommunication and NPR Presentation.pptx
Communication and NPR Presentation.pptx
Winnie 8 vues
FROSTBITE par A Y
FROSTBITE FROSTBITE
FROSTBITE
A Y6 vues
Blacktown Hospital is the worst scum I ever on earth so is Katoomba.pptx par BraydenStoch2
Blacktown Hospital is the worst scum I ever on earth so is Katoomba.pptxBlacktown Hospital is the worst scum I ever on earth so is Katoomba.pptx
Blacktown Hospital is the worst scum I ever on earth so is Katoomba.pptx
BraydenStoch217 vues
Unraveling the Truth: Dispelling Common Misconceptions About Physiotherapy in... par Integrative Physio
Unraveling the Truth: Dispelling Common Misconceptions About Physiotherapy in...Unraveling the Truth: Dispelling Common Misconceptions About Physiotherapy in...
Unraveling the Truth: Dispelling Common Misconceptions About Physiotherapy in...
OBJECTIVES , CHARACTERISTICS , CONCEPT AND PHILOSOPHY OF NURSING.pptx par Krishna Gandhi
OBJECTIVES , CHARACTERISTICS ,  CONCEPT AND PHILOSOPHY OF NURSING.pptxOBJECTIVES , CHARACTERISTICS ,  CONCEPT AND PHILOSOPHY OF NURSING.pptx
OBJECTIVES , CHARACTERISTICS , CONCEPT AND PHILOSOPHY OF NURSING.pptx
SMART RADIOLOGY : AI INNOVATIONS par vaarunimi
SMART RADIOLOGY  : AI INNOVATIONS SMART RADIOLOGY  : AI INNOVATIONS
SMART RADIOLOGY : AI INNOVATIONS
vaarunimi39 vues
NURSING AS A PROFESSION, CHARACTERISTICS OF NURSE,NURSING PRINCIPLES.pptx par Krishna Gandhi
NURSING AS A PROFESSION, CHARACTERISTICS OF NURSE,NURSING PRINCIPLES.pptxNURSING AS A PROFESSION, CHARACTERISTICS OF NURSE,NURSING PRINCIPLES.pptx
NURSING AS A PROFESSION, CHARACTERISTICS OF NURSE,NURSING PRINCIPLES.pptx
Krishna Gandhi36 vues
Working-across-sectors_fulldraftreport_Aug-2019.pdf par manali9054
Working-across-sectors_fulldraftreport_Aug-2019.pdfWorking-across-sectors_fulldraftreport_Aug-2019.pdf
Working-across-sectors_fulldraftreport_Aug-2019.pdf
manali905425 vues
New Microsoft Word Document (2).docx par ElyaGhiasyan
New Microsoft Word Document (2).docxNew Microsoft Word Document (2).docx
New Microsoft Word Document (2).docx
ElyaGhiasyan9 vues
What are the benefits of a dental crown.pdf par BridgesDental2
What are the benefits of a dental crown.pdfWhat are the benefits of a dental crown.pdf
What are the benefits of a dental crown.pdf

HIPAA and COVID19

  • 1. HIPAA and COVID19 Presented by: David A. Ginsberg, President, PrivaPlan Associates, Inc Copyright PrivaPlan® Associates, Inc. 2020
  • 2. Overview • Workforce repositioning to their homes creates new HIPAA Privacy and Security challenges • Telemedicine adds to these challenges • What is the enforcement discretion? • What are best practices for telemedicine and work from home
  • 3. HIPAA Enforcement Discretion Why? “COVID-19 nationwide public health emergency We are empowering medical providers to serve patients wherever they are during this national public health emergency. We are especially concerned about reaching those most at risk, including older persons and persons with disabilities. – Roger Severino, OCR Director.”
  • 4. HIPAA Enforcement Discretion • This is NOT a blanket waiver of HIPAA! • Similar discretion has been issued for other emergencies like recent Hurricanes • Let’s examine the discretion
  • 5. Enforcement Discretion “A covered health care provider that wants to use audio or video communication technology to provide telehealth to patients during the COVID- 19 nationwide public health emergency can use any non-public facing remote communication product that is available to communicate with patients. OCR is exercising its enforcement discretion to not impose penalties for noncompliance with the HIPAA Rules in connection with the good faith provision of telehealth using such non-public facing audio or video communication products during the COVID-19 nationwide public health emergency. This exercise of discretion applies to telehealth provided for any reason, regardless of whether the telehealth service is related to the diagnosis and treatment of health conditions related to COVID-19.”
  • 6. Enforcement Discretion “Under this Notice, covered health care providers may use popular applications that allow for video chats, including Apple FaceTime, Facebook Messenger video chat, Google Hangouts video, or Skype, to provide telehealth without risk that OCR might seek to impose a penalty for noncompliance with the HIPAA Rules related to the good faith provision of telehealth during the COVID-19 nationwide public health emergency. Providers are encouraged to notify patients that these third-party applications potentially introduce privacy risks, and providers should enable all available encryption and privacy modes when using such applications. ” My emphasis—enable all available encryption and privacy modes
  • 7. Enforcement Discretion “Under this Notice, however, Facebook Live, Twitch, TikTok, and similar video communication applications are public facing, and should not be used in the provision of telehealth by covered health care providers. Covered health care providers that seek additional privacy protections for telehealth while using video communication products should provide such services through technology vendors that are HIPAA compliant and will enter into HIPAA business associate agreements (BAAs) in connection with the provision of their video communication products. ” The last statement is very important
  • 8. Enforcement Discretion • The Notice goes on to define technologies that are HIPAA compliant and will sign a BAA • If you don’t obtain a BAA the enforcement discretion means the OCR will not find this a compliance violation….but we believe this is a slippery slope because you need to ensure that once the emergency is lifted you obtain compliant technology “Under this Notice, however, OCR will not impose penalties against covered health care providers for the lack of a BAA with video communication vendors or any other noncompliance with the HIPAA Rules that relates to the good faith provision of telehealth services during the COVID-19 nationwide public health emergency. ”
  • 9. Best Practices • If you will have more of your workforce work from home what is necessary? • Acceptable home use policy agreements-some key points: • Ensure homeWIFI is secured with WPA2 encryption • Work from as private an area at home as possible-and don’t allow family members to overhear, shoulder surf or see your workstation or smartphone displays
  • 10. Best Practices • Always log off when you get up and leave your workstation or smartphone at home unattended-and this is not a screen saver but log off • Don’t use sticky notes or write down your passwords and keep them near the workstation • Don’t use personal computers without permission • Don’t save data on media • Don’t print protected health information to a local printer unless the printed material is immediately secured….
  • 11. Best Practices • The same restrictions on texting and email apply for home use as at your medical practice • Disable Alexa, Nest, Google, Siri and any assistive technology if discussing PHI with a co-worker, or for telemedicine sessions • Enable session security if using a teleconferencing platform
  • 12. Platform security-telemedicine Generally, the moderator has numerous controls on most platforms (Zoom, Gotomeeting, BlueJeans,Webex etc.) like: • Enabling end to end encryption • Requiring a password • Creating a waiting room and then inviting the patient • Locking a session once it has started • Restricting chats, or enforcing encrypted chats • Disabling patient recording—VERY IMPORTANT!! • Temporarily pausing a screen when a new window is opened
  • 13. Telemedicine-Privacy • At least for the first patient encounter, ask and document patient consent to using this technology • Ask if the patient is in a private area and if not confirm they are comfortable continuing • Document time and duration and follow all appropriate clinical documentation standards