The Omnibus rules were enacted in 2013 to update the HIPAA law.

Many of the areas that were causing risk of patient information breaches were addressed, and new law written, in such a way as to increase enforceability, the size of fines and the ability to regulate covered entities. 

These rules went into effect January 2013 and covered entities were given until September 2013 to become compliant. 

These are being strongly enforced and the government has little sympathy for a covered entity who has not complied as they feel all physician offices were given nine months to come into compliance six years ago! 

These rules mandate specific actions be taken by physician offices and if those actions have not been taken, especially relative to the distribution of patient privacy policies and the institution of business associate agreements, the fines and penalties can be extraordinary! 

Why should you Attend: This webinar is a must for all practicing physicians! 

There are three things that must be done with your notice of patient privacy policy. If any one of those is missing in your procedures you could be subject to major fines, possibly willful neglect fines, that are a minimum of $50,000 up to $1.5 million. 

Relative to business associate agreements the facts are very simple-if someone who has access to your information, you have given your information, or they store your information subsequently miss handles that information you are responsible for their actions- unless you have a BAA agreement in place with them! 

A properly written and executed agreement is your best and pretty much only protection! 

Areas Covered in the Session:

• What is the Purpose of a NPPP (Notice of Patient Privacy Policy)
• What Does it Say
• What three things MUST be Done with this Document
• What is a BAA Agreement
• Who needs One
• Who does NOT need One (may be suprising!)
• What other Threats Exist EVEN IF YOU HAVE A BAA?
• Who has to be Trained Relative to these Matters

• Doctors
• Staff and Compliance Officers Functioning in Private or Group Practice Offices. Not Geared Toward Hospitals or Insurance Companies