Managing Security Breaches
Member Webinar, January 27, 2023
It can happen to anyone. Your EMR company reports a security breach exposed some of your patient records. You accidentally send a group email to patients without using the Blind Copy box. You disclose records to someone without having a signed HIPAA Authorization. All of these accidental disclosures require a risk analysis to determine whether the accidental disclosure or security breach must be reported to the involved patients and the Secretary of Health and Human Services (HHS). This webinar will discuss:
- how to determine if a breach really occurred under HIPAA’s definitions and exceptions
- how to perform a risk analysis to determine whether the breach must be reported
- how to deal with business associates when they are the source of the breach
- requirements for notifications to individuals and the Secretary of HHS
Security Breach Notification_slide handout
Security Breach Policy and Procedure (Template)