Health Insurance Portability Accountability Act (HIPAA) compliance is difficult and mandatory. We can help.
Uberguard | HIPPA compliance, internet security systems, computer security software, information security policy, GLBA (Gramm-Leach-Bliley Act), business continuity plan creation, vulnerability assessment, security training, security policy consulting. Uberguard helps you understand the full implications of the Health Insurance Privacy and Accounability Act including HIPAA compliance, HIPAA regulations, HIPAA privacy, HIPAA security, HIPAA certification, HIPAA software, HIPAA security consultants, HIPAA privacy rule, HIPAA requirements, HIPAA law, HIPAA compliant, HIPAA consulting, HIPAA privacy regulations and the final HIPAA security rule. We are located in Rochester, NY and serve clients in Albany, Buffalo, Syracuse and New York City (NYC) as well as nation-wide.

ÜberGuard HIPAA Compliance ÜberGuard HIPAA Compliance
HOME
ABOUT US
SERVICES
NEWS
CISSP
HIPAA
GLBA
CAREERS
CONTACT




The long-awaited HIPAA Compliance Security Rule has arrived.

Lack of compliance is a violation of Federal law.

Effective April 21, 2003, covered entities* (CEs) with receipts of more than $5 million have until April 21, 2005 for compliance.

CEs with receipts totaling less than $5 million will have until April 21, 2006, to become compliant.

* A CE (covered entity) is any health plan, health care clearinghouse, or health care provider who transmits or stores any protected health information in electronic form. Failure to comply carries penalties of up to $250,000 in fines and/or a jail term of ten years

Requirements for HIPAA compliance involve the definition of how information is processed, exchanged and protected. Security Rule requirements are specific to the safeguards listed below.

Security Rule Requirements: Three categories for HIPAA Compliance:
  1. Administrative Safeguards
    1. Documented policies of day-to-day operations.
    2. Employee's relationship to protected health information.
    3. Management of the selection and use of security controls.

  2. Physical Safeguards
    1. A series of security implementations designed to protect a CE's data systems, and physical facilities from natural threats and/or man-made intrusions.

  3. Technical Safeguards
    1. A series of security measures that specify the use of technology to secure protected health information - especially the access to such data.
Security Rule Specifications: 42 Implementations for HIPAA Compliance

The Security Rule has 42 implementation specifications. Full compliance requires 20, which are required, and 22, which are addressable. The required specifications are mandatory-- they MUST be implemented.

The addressable specifications can be handled by performing one of three things:
  1. Implementing the addressable specification, if reasonable and appropriate.
  2. Implementing an alternative compensating control that upholds the standard.
  3. Implementing nothing if the specification is not reasonable and appropriate and the standard can still be met.
HIPAA Compliance Combats Waste and Fraud

Health Care Industry spending accounts for 14.3% of the country's Gross Domestic Product. Although it is the largest sector of the economy, it is also the least automated. The health care industry is overburdened with paperwork, leading to material waste and sometimes to fraud. In fact, a recent Deloitte & Touche study predicts that, if left unchecked, health care spending will reach 16% of the GDP, of which the government funds only about one-third.

By becoming HIPAA compliant, the U.S. Department of Health and Human Services (HHS) estimates a savings of $30 billion dollars over the next ten years. Widespread use of electronic transactions, eliminating inefficient paper forms, is just one way HIPAA compliance procedures stand to save the industry billions of dollars. It can save you money and time, too.

Time and Resource Intensive

The most important issue today is the Security Rule.

Becoming compliant is time and resource intensive. At ÜberGuard, we understand the serious business issues compliance involves. Current updates and expertise in security procedures are a must. These are the kind of updates and expertise ÜberGuard utilizes on a day-to-day basis. We keep you updated as needed, providing the right solutions to keep your data and your business secure.

To become compliant with the Security Rule NOW, call or write to us at:

Email:
infosec@uberguard.com

Telephone:
(585) 226-2635

Fax:
(585) 226-9329

Mailing Address:
ÜberGuard Information Security Consulting
91 Clinton St.
Avon, NY 14414