Loading...
HomeMy WebLinkAbout20141024.tiff • AGENDA Annual HIPAA Meeting November 15, 2010 Departments Invited: Area Agency on Aging: Eva Jewel and Sandy Hasch Paramedic Services: Dave Bressler ACS: Anita Scrams Administration: Monica Mika and Patti Russell Risk Management: Michelle Raimer Health: Mary Lloyd-Cumley Jail: Nancy Kroll Attorney's Office: Cyndy Giauque • PROPOSED AGENDA 1. Review and update status from each entity 2. Discuss any problems or complaints 3. Discuss any plans needed to be amended or updated 4. Discuss any assistance and or training anyone needs 5. Review County wide HIPAA standard form 6. HRD Document Imaging - Governance Request 7. Discuss the need and benefits of a County-wide HIPAA audit 8. Discuss standards for wireless transmission for data and security 9. RED FLAG rules and other pending legislation 10.Other • 2014-1024 • Minutes Annual HIPAA Meeting November 15, 2010 Departments Attending: Area Agency on Aging: Eva Jewel and Sandy Hasch Paramedic Services: Dave Bressler Administration: Monica Mika and Patti Russell Risk Management: Michelle Raimer Health: Mary Lloyd-Cumley Jail: Nancy Kroll Attorney's Office: Cyndy Giauque • Departments Absent: ACS: Anita Scrams Minutes: Glen Czaplewski - Intern PROPOSED AGENDA 1. Review and update status from each entity 2. Discuss any problems or complaints • Questions were raised regarding document disposal and security, particularly for documents at the missile site. 3. Discuss any plans needed to be amended or updated • When HIPAA was first put into place, then Director of Finance and Administration Don Warden had purchased a stock set of guidelines and documents for HIPAA compliance. Some departments are still using that material verbatim while others have made varying degrees of changes. Through the proposed HIPAA Audit, it was suggested that the County Attorney's office review all plans and bring them into line. 4. Discuss any assistance and or training anyone needs • A more comprehensive look needs to be taken at training. Some • departments are doing a great deal of training, while others only do an informal review—typically consisting of instructing employees • not to share any information which may be subject to HIPAA. In the past some key departments have been left out of training (e.g. accounting). Paramedic Services traditionally has had a video training. The county Attorney's office will be reviewing these trainings to see if they can be used more broadly. IN addition, some basic HIPAA information is now being included in New Employee Orientation. This is another item for the HIPAA Audit. 5. Review County wide HIPAA standard form • Cyndy Giauque from the County Attorney's office is working on a standard form for use in the Health Department and Paramedic Services. 6. HRD Document Imaging - Governance Request 7. Discuss the need and benefits of a County-wide HIPAA audit • A county wide HIPAA audit is being kicked off at this meeting. • Members of the committee will be reviewing county wide compliance and policies related to HIPAA. • Among other things discussed in the meeting, the issue of locked doors needs o be addressed annually. This will likely be the first thing the audit looks at. • Additionally, fees for information, forms and policies will be examined as well as ensuring that appropriate people are well trained. • 8. Discuss standards for wireless transmission for data and security • Wireless transmission of data is particularly important for paramedics who need to transmit vital information to emergency rooms, while also feeding their billing system to ensure payment. • This issue was largely addressed through an agreement with Tiburon. During the switch to Spillman, a similar agreement will need to be reached. 9. RED FLAG rules and other pending legislation • Dave Bressler and Cindy Giauque gave a brief overview of the Red Flag Rule Making Process as it stands now. They are proactively looking to implement the rules which seem likely to emerge from the process. • Issues of privacy in some public documents exist, specifically warrants. It is believe that current business practices have addressed many of these concerns, but vigilance is required to ensure compliance in the future. 10.Other • Hello