HIP101 – HIPAA Privacy and Security

Course Learning Objectives

This course is designed for developing software that meets compliance requirements in the healthcare industry as outlined by the Health Insurance Portability and Accountability Act, or HIPAA. By the end of this course, you’ll be able to explain what HIPAA covers, who needs to comply, and the types of data covered and the three important rules for HIPAA compliance – the Privacy Rule, the Security Rule, and the Breach Notification Rule.

Description

HIPAA for Software Development helps developers and software architects meet HIPAA requirements by covering the objectives of HIPAA compliance, the roles of Covered Entities and Business Associates, and the key privacy and security requirements for safeguarding protected health information. The course then discusses strategies for protecting various types of information and responding to potential breaches of protected health information.

Audience Time Required
Developers
Software Architects

Tailored learning – 45 minutes total (approx.)

Course Outline

1. Introduction to HIPAA

  • Introduction
  • HIPAA
  • PHI
  • Compliance rules
  • History of HIPAA
  • Penalties
  • Who does HIPAA apply to?
  • Covered Entities
  • Business Associates
  • Covered data
  • Privacy rule
  • Security rule
  • Breach notification rule

2. Privacy Rule and Breach Notification

  • Recap
  • Coverage
  • PHI
  • Objectives and principles
  • Uses and disclosures of PHI
  • Minimum necessary standard
  • Examples: Disclosures and privacy safeguards
  • Right to notice
  • Right to access
  • Right to amendment
  • Right to view disclosures
  • What is a breach of PHI?
  • Breach notification requirements

3. Security Rule

  • Introduction
  • Objectives
  • Coverage and protection
  • General security principles
  • CIA and ePHI
  • Security risk assessment
  • HIPAA security safeguards
  • Administrative safeguards
  • Physical safeguards
  • Technical safeguards
  • Tips for HIPAA compliance