HIPAA Law



             


Saturday, May 31, 2008

Online Insurance Shopping: Finding Health Insurance on the Web


Online Insurance Shopping: Finding Health Insurance on the Web

With more and more consumers turning to the Internet to locate goods and services, it's no wonder that online health insurance shopping is gaining popularity, too. If you're thinking about shopping for health insurance online, you're not alone. And, while shopping online can save you time and money, there are a few factors to consider to ensure a positive shopping experience.

Knowing What You Need

Do you know what kind of health insurance plan you need? Do you know what features or benefits you'd like to have in your policy?

Knowing what you need before you begin shopping can save you a lot of time. If you're not sure what kind of policy you need, try contacting your state's Division of Insurance (DOI). The DOI exists to protect and educate consumers on insurance matters; you can contact them by phone or visit them on the Web to find the information you need about health insurance plans in your area. Remember, the more you know, the more educated your health insurance decisions will be!

Choosing a Reputable Company

When you open your Web browser and enter your search terms, you'll undoubtedly get multiple options in return. But which of these companies is right for you?

Weed out the good companies (and Web sites) from the bad and:

Get the Facts. You can investigate online insurance companies and referral services by visiting the sites of AM Best and the Better Business Bureau (BBB); obtaining information about the company's financial standings and customer service ratings will help you determine if consumers have had good experiences in the past--and whether the company is doing well enough to be there future.

Consumer hint: most BBB-approved companies will display the BBB logo on their Web pages.

Verify Security Measures. With the increased usability of the Internet also comes an increased risk for fraudulent activities. While this scares many insurance shoppers from using the Web, shopping within sites that are technologically secure drastically reduces those risks.

If a company's Web site is secure, they'll most likely include a clickable logo on their landing page, detailing the site's security certification or "seal of approval". Still not convinced? The company's security policy should be located within the site; reputable companies will use the latest technology to protect your information and will never give or sell your email address for spamming or other marketing purposes.

When it comes to Web site security, the bottom line is this: if you don't like what you see, move on to another site!

Read Testimonials. What do other consumers have to say about their experience with the company? Check out the site's customer testimonials to see what other health insurance shoppers liked about the service. Can't find any? Might be a good indication that positive feedback has been scarce--in general, companies display positive comments with pride!

Understanding the Process

Different companies will operate accordingly. One company might give you one health insurance quote, while another might give you five. Generally speaking, companies that provide multiple quotes are more efficient for the consumer--rather than applying for quotes on five different Web sites or calling five different insurers, you can obtain multiple quotes quickly and find the cheapest health insurance.

But, when it comes to obtaining health quotes online, it's all about preference. If you'd prefer to obtain one quote at a time, you will find company sites than can deliver exactly that.

Go with your Gut

When it comes to shopping for health insurance online, educating yourself on insurance and researching potential insurers will help you make the best purchasing decision possible. Get started today by identifying what you need out of a health insurance policy, and set your sights on finding it. And as always, shop online with care by verifying the legitimacy and security of any Web site before submitting your business!

____________________________________________________________________

About InsureMe

InsureMe, an Englewood, Colorado-based company, links agents nationwide with consumers shopping for insurance. Specializing in auto, home, life, long-term care and health insurance quotes, the InsureMe network provides thousands of agents with insurance leads every year. For more information, visit www.InsureMe.com.

Megan L. Mahan is a copywriter and insurance expert based in Denver, Colorado. She holds degrees in French and English from the University of Iowa and lends her writing and editing expertise in print media and Internet communications through her informative articles

Labels: , , , ,

Thursday, May 22, 2008

What Should Be Considered Before Choosing Health Insurance?

It is very difficult to make a right and wise decision on which Health Insurance Policy to buy. This is truly a confusing task. Here is a guideline. Here are the five most important things you have to pay attention to. These items are also your keys to picking a policy that's right for you:

The insurance company's record of complaints: Every large company will have some complaints. You can obtain all this information at your State Board of Insurance. Avoid companies that have a high number of unresolved complaints. Ask your agent for the phone number for your State Board of Insurance. If he will not give it to you, this is a warning signal! You can also look up the number in any directory of your state's agencies. No matter what your agent says, CALL your State Board of Insurance and ask them for the record on any company you are considering.

The limits shown on your health insurance quote: Check your quote to see if you are comfortable with the benefit levels. You can usually change several levels to fit your needs and budget. For example, a higher deductible will cost less each month. Also, many plans give you a choice to split your medical bills with the Insurance Company either 50/50 or 80/20 (with them paying 80%). Then they will have an amount (your stop loss) where they will take over at paying 100% of your covered bills for the remainder of the year. These deductibles and other levels start over every year in most plans. Some plans, though, have a "per cause" deductible. Such a deductible means that you will be responsible for bills up to that deductible for each accident or illness. Make sure you are aware of this distinction, so you can choose a plan that's right for YOU!

The insurance company?s rating: Ask your agent for the company's best rating. If the company is highly rated at this national rating registry, then the company will have literature showing their rating with an explanation of what it means. Choose only companies that have an A or A+ rating.

The limits revealed within the policy: Ask your agent for a sample policy, and then check two sections: The Benefits and The Limitations and Exclusions. Many of your benefits are actually limited in the Benefits section. For example, diagnostic testing or outpatient treatment may be severely limited. These days, you could have a serious disease such as cancer, and never go into the hospital for it. You could rack up thousands of dollars in medical bills for the diagnostic and follow-up lab tests and MRIs, and then have surgery, chemo, or radiation therapy all on an outpatient basis.

Your hospital room rate and intensive care can be limited. Your hospital room rate should be at least average semi-private and your intensive care benefit should not be tied to your room rate, but should, instead, be covered as whatever is an average ICU rate for the area of the hospital, also. Some policies limit the ICU benefit to 3 times the regular room rate, when ICU can cost you 10 or 20 times the room rate each day. A short hospital stay with a limit like this in your policy can cost you literally thousands of dollars. A long hospital stay with a limit like this in your policy could drive you into bankruptcy. Even if your policy says it takes over at 100% after $5,000 of covered medical bills, the important term here is "covered" medical bills. If the policy only pays three times the room rate for ICU, then the rest of the ICU bill is considered an "uncovered" charge!

Pay the Insurance Company, Not the Agent, & Follow Up!: And lastly, make your check payable to the Insurance Company, and then follow up to make sure it was received. When you get your policy, check the Schedule of Benefits to verify you got the coverage you ordered, and then check to see if any special Amendments were added to your policy to exclude any of your conditions. If an Amendment exists, these conditions will always be excluded from this policy, even after the Pre-Existing Conditions Limitation expires.

With all these 5 items, they will help you which will protect you from catastrophic medical bills. Be sure to take the time to choose wisely when it comes to your health insurance!


: Mary Williams owns many Websites related to health and eye care, including Lasik Surgery Secrets, and Lasik Vision Secrets. Please visit her websites and find out more about lasik.

Labels: , , ,

Wednesday, May 21, 2008

Health Insurance Companies - The Good and The Bad


When you are shopping for health insurance it would be helpful to know how often health insurance companies fail to provide the service you would expect. The Arizona Department of Insurance has released a report listing fines and complaints filed against health insurance companies in the state.

The report covers 27 insurers or about 75% of the companies serving Arizona. Does the report reflect health insurance performance in other states? I can't be sure, but it does give us a peek into the workings of the health insurance industry.

United Healthcare of Arizona is one of the major insurers in the state and it had the highest number of complaints per insurance policy. Time Insurance and Mega Life And Health Insurance are smaller companies and they had even high complaint ratios.

In Arizona Humana Health Plan satisfies the appeals of its insured more than any other company. On the other hand the report shows that Mega resolves fewer appeals to the satisfaction of the insured.

When it comes to the number of fines levied in the past 5-years by the AZ Department of Insurance the Arizona arm of CGNA Healthcare garbs the top spot. They were assessed the most fines.

If you would like to read more about the performance of health insurance companies you can find the full report online if you do a search for "Report on AZ Health Insurers". Chances are the insurance department or commission in your state issues a similar report.

Another fact we can learn from this Arizona report is that your state's insurance regulatory body may be able to help you in a dispute with your insurance company. You can find state insurance regulators on the internet by doing a search for National Association of Insurance Commissioners. The NAIC has a map of the United States on their web page. Just click on your state and you'll find your state's insurance department information.

Before you buy any policy it would be sensible to learn just which health insurance companies fail to please consumers in your state.

Mark Walters helps individuals, families and travelers choose health insurance coverage at http://www.HealthInsuranceMonster.com

Labels: , , , ,

Friday, May 16, 2008

How to Lower Your Health Insurance Premiums


Human beings are mortal. Though every single life has to terminate one day yet it is the very nature of rational agents to plan for the expected as well as the unexpected happenings in their future. The most prudent plan to secure your and the lives of your loved ones is to get your life insured. By doing this an individual enters into a contract with the company (from where hw takes the life insurance policy) according to which the latter will recompense for his death by paying a predetermined some of money to his family till the insured premiums are current.

Life insurance policy acts as an individual's best friend in the hours of grave need. This is because if unfortunately something happens to the primary wage earner, his family is assisted with life insurance amount to make up for the loss and move ahead in life. so in today's life it is immensely essential for an individual to take a life insurance policy a soon as possible. Quite often many government officials and employees in a company are offered group life insurance which is totally free of cost. With the help of their company employees can also take an additional life insurance at reduced rates.

There are different companies that offer a life insurance policy. Though the terms and conditions do not vary largely yet it is at the discretion of the individual which policy to adopt and from where. By and large people prefer to take those policies that facilitates with maximum compensation and demands less premium. In case a person takes a Term life insurance policy, he will initially be paying less premium which gradually increases in the later years of his life. if one adopts either a whole life insurance or a variable life insurance the premium is settled once and for all at the time of taking the policy. The premium amount does not depend on factors such as the age of the individual etc.

However the amount of premium even varies with the age and the kind of life of the policy taker. For instance the policy will be quite expensive for a 50-year-old man than that for a 25-year-old guy. In the same way a chain smoker or an alcoholic will have to pay more premium than a non-smoker healthy individual of the same age. Also a person who earns by way of a precarious job (a stuntman in films) will be charged with a high premium than a teacher or a doctor.

Thus one of the best ways to lower your life insurance premiums is to take a life insurance policy early in life and to try and quit such harmful habits. On the same hand prior to taking a policy you ought to make sure that you do a complete survey of the market i.e. you should be clear about almost all the life insurance policy offers that are available and specially what you desire of your policy. This will help you in selecting the best-suited policy for yourself.

A smart way to know the life insurance quotes for oneself is via Internet. What previously was to be done with the assistance of agents by paying them, can now be done absolutely free. Taking online life insurance quotes not just saves your money but also time and energy.

Mansi gupta writes about best health insurance quote .

Labels: , , , ,

Tuesday, May 13, 2008

Different Types of Health Insurance Explained


Health is the biggest and most crucial asset of every living being. An unhealthy animal and individual can never truly experience any joy. It is the wealth of health that provides the requisite potential to topple over all odds and to move ahead with life. So such an essential part of a person's life demands extra care and concern. An ideal way to secure an individual's prized possession for him and for those who love him is a health insurance policy.

A health insurance policy is meant to financially assist a person in case there occurs a setback to his health. For instance he is afflicted by some grave disease, meets an accident, becomes handicapped etc. In order to provide complete service and for the all round development of the individual the health care system of America offers ample of options or different types of health insurance for its citizens. Some of these are explained below:

* Preferred Provider Organization or PPO is a discount form of health insurance policy. PPO has a complete network of health care providers from hospitals to doctors. If an individual has taken PPO policy and takes treatment from any of these assigned providers, the PPO covers his complete medical treatment. While if the person takes recourse to some other doctor or institution, he gets served at a reduced rate. PPO's thus facilitate medical services at abridged rates.

* One immensely cheap form of health insurance is the catastrophic health insurance. This sort of policy is basically meant for the people who have the financial means to manage regular illnesses and hospitalizations. The deductibles i.e. the sum of money an individual for these policies are quite large for this policy. At times there are caps on the amount the policy will pay in case of illness.

* A Short term health insurance policy is akin to a life insurance policy in the sense that both can be adopted for a specific tenure. This policy covers catastrophic to comprehensive cases and excludes the situation of pregnancy and childbirth. Quite often it is hard to qualify for these policies as there are strict conditions or qualifying procedures. Moreover these policies may not cover any pre-existing medical conditions.

* HMOs or the Health Maintenance Organizations also offer health insurane t significantly lower premiums. But the disadvantage is that they confine the sources a person may seek in non-exigency situations. HMOs do not cover the precautionary measures such as immunization, mammograms and physicals. There are quite a few issues associated with the HMOs. For instance it is believed that doctors receive financial perks for deducting the cost of medical services to patients. One way to do this is to pay monthly fee to the doctor for each patient despite of delving in to the issues of what treatment the latter one needs.

* There are also full-service health insurances. The lucrative feature of these policies is that they cover all sort of illnesses, cover any medical treatment the patient takes regardless of the institution or doctor and the deductibles are at the discretion of the policyholder. He may pay a high or a low one.

* Medicare or Medicaid insurances are meant for the retired or the low-income individuals.

Mansi gupta writes about affordable health insurance quote .

Labels: , , , ,

Tuesday, May 6, 2008

Divorce And Health Insurance Benefits

Divorce causes major issues with health insurance benefits. Many families have employer provided and/or paid for health insurance benefits that cover the entire family. It is not uncommon to see situations where the other spouse is a stay at home parent, with absolutely no access to health insurance benefits, or employed at a job with either no health insurance benefits available or those benefits available at a substantial cost. After a divorce, the spouse with the family health insurance coverage can no longer cover the other parent. They are no longer "family" members who can take advantage of one health insurance policy. How to then ensure that everyone stays insured does become an issue for negotiation and/or divorce litigation.

If both parties do not have health insurance benefits available and if the cost of obtaining those health insurance benefits for the other party after a divorce become prohibitive, there is one way to continue benefits without additional cost. That way is to enter into a separation agreement, but delay the divorce. That way, the parties actually do remain married and they can stay on the same health insurance plan even thought they are separed. The parties can consent to waiting for one, two or more years before either one files for a divorce. While the parties will remain married, their property, custody, and support issues will be addressed in their separation agreement. Under some circumstances, this is an optimal resolution. For example, what if both parties want one spouse to remain at home for several more years with young children, but they do still want to separate and divorce? This option works for them. They can separate, agree upon getting a divorce and all of the terms that they have to agree upon, but delay the final divorce so that they can keep cost effective health insurance benefits in place.

The above example can provide some difficulties that must be discusse in detail with your divorce attorney. For example, if you separate but do not divorce, your federal tax filing status may be affected. Also, in some states, it is not as easy as in other states to enforce a separation agreement. Or, in yet other states, it is possible for one spouse to take the advantages provided by the agreement for a year or two and then go to court and seek entirley different forms of financial relief in a divorce action. Only a divorce attorney licensed to practice in your state can advise you on these issues.

Another option for couples divorce is COBRA coverage. COBRA is a federal law which mandates that a person covered under a health insurance policy be given the right to continue that coverage, at their own cost, for a set time period if certain requirements exist. For example, if you obtain a divorce and your spouse had family health insurance coverage through his employer, the employer would have to provide COBRA coverage for you after the divorce. That COBRA coverage would require that you have the same health insurance policy, although your coverage would now be individual and not family. You would have to pay the employer's cost for that individual policy.

It is not uncommon for a stay at home spouse or a spouse who has less income or employment options to obtain COBRA coverage and to negotiate that their spouse pay for that coverage for a specified time period after the divorce. In doing so, this gives the spouse who did not have coverage available some time to either obtain employment with coverage or become financially settled and able to afford their own coverage.

 Jean Mahserjian is an attorney and the author of numerous websites and books devoted to helping consumers through the process of divorce. To download free excerpts from her divorce and custody books, visit: http://www.millenniumdivorce.com

 

Labels: , , , , ,

Saturday, May 3, 2008

Travel Health Insurance: Reimbursement Depends On Following The Rules

Travel Health Insurance: Reimbursement Depends On Following The Rules

 by: News Canada

(NC)Travelling, whether for business or pleasure, involves risk. A personal emergency may necessitate an early return, or you may need hospital treatment or air evacuation due to a medical problem. Travellers should be aware that the Ontario government health plan (OHIP) is rarely enough when it comes to medical treatment outside the country, so without supplementary insurance during an emergency, you could be exposed to considerable financial obligations.

Travel health insurance policies vary considerably, says the Financial Services Commission of Ontario (FSCO), an agency of the Ministry of Finance that regulates Ontario's insurance industry. FSCO reminds us to pay special attention to the definitions, pre-existing condition clauses, deductibles, as well as the limitations and exclusions sections of the policies. Ask for clear explanations of each and once you are satisfied, make your insurance purchase. But even then, says FSCO, there is a bit more work for you to do as follows:

Read the policy: Before leaving on your trip, read and become familiar with your policy and the coverage. It is your responsibility to know what you have purchased.

Take it with you: Include the policy with your travel documents. Keep both the emergency contact phone number available, as well as the number for your insurance company. Compile and include a list of current medications.

Get authorization (if possible): If a medical problem arises, the toll-free phone number provided will connect you to an emergency service centre. Be ready to supply all the facts and information and ask for clarification if you do not fully understand. Service centres manage and monitor your treatment and make the medical referrals. Before you go ahead with treatment however, be sure the service centre has obtained authorization from your home-based insurance company. If not, you may be personally obligated for medical services not approved.

Follow the payment process: Under some policies, you pay the hospital and are reimbursed later by the insurance company. Other policies provide payment directly to the medical facility or practitioner. The policy will tell you which procedure to follow.

More information on travel health insurance is available online at www.fsco.gov.on.ca. Or, for a copy of their booklet Shopping for Travel Health Insurance phone (416) 590-7298 (Toll Free: 1-800-668-0128).

- News Canada

Editors, these articles are for use in Ontario only


News Canada provides a wide selection of current, ready-to-use copyright free news stories and ideas for Television, Print, Radio, and the Web.

News Canada is a niche service in public relations, offering access to print, radio, television, and now the Internet media, with ready-to-use, editorial "fill" items. Monitoring and analysis are two more of our primary services. The service supplies access to the national media for marketers in the private, the public, and the not-for-profit sectors. Your corporate and product news, consumer tips and information are packaged in a variety of ready-to-use formats and are made available to every Canadian media organization including weekly and daily newspapers, cable and commercial television stations, radio stations, as well as the Web sites Canadians visit most often. Visit News Canada and learn more about the NC services.

Labels: , , , , ,

Tuesday, January 8, 2008

Alert: New HIPAA Rules Could Affect Your Organization

 Trust Failure to adhere to the new guidelines could cost your company
up to $250,000 per infraction!


On April 21, 2005 (just over three weeks from today), a new Health Insurance Portability and Accountability Act (HIPAA) security rule goes into effect. The requirements of this rule, which are basically information security best practices, focus on the three cornerstones of a solid information security infrastructure: confidentiality, integrity and availability of information.

The imminent HIPAA regulatory requirements encompass transmission, storage and discoverability of Protected Health Information (PHI). Given the widespread use and mission-critical nature of email, enforcement of HIPAA encryption policies and the growing demand for secure email solutions, email security has never been more important to the healthcare industry than it is right now.

Although many assume it applies only to health care providers, HIPAA affects nearly all companies that regularly transmit or store employee health insurance information. HIPAA was signed into law in 1996 by former President Bill Clinton, with the intent of protecting employee health and insurance information when workers changed or lost their jobs. As Internet use became more widespread in the mid-to-late 1990s, HIPAA requirements overlapped with the digital revolution and offered direction to organizations needing to exchange healthcare information.

HIPAA in the Workplace
Collaboration between employers and healthcare professionals has grown increasingly digital, and email has played an ever-increasing role in this communication. However, emails increased importance can lead to severe consequences without proper security and privacy measures implemented.

In addition to the usual concerns about privacy and security of email correspondence, even organizations that are not in the healthcare industry must now consider the regulatory compliance requirements associated with HIPAA. The Administrative Simplification section of HIPAA, which, among other things, mandates privacy and security of Protected Health Information (PHI), has sparked concern about how email containing PHI should be treated in the corporate setting. HIPAA, as it relates to email security, is an enforcement of otherwise well-known best practices that include:


  • Ensuring that email messages containing PHI are kept secure when transmitted over an unprotected link
  • Ensuring that email systems and users are properly authenticated so that PHI does not get into the wrong hands
  • Protecting email servers and message stores where PHI may exist


Organizations regulated by HIPAA must comply and put these practices in place. However, the need to comply with regulations puts particular pressure on the healthcare industry to enhance their use of technology and catch up with other industries of similar size and scope.

Privacy and Email Security
The privacy protection provisions in HIPAA pose a major compliance challenge for the healthcare industry. These provisions are intended to protect patients from disclosure of any of their individually identifiable health information. Organizations that fail to protect this information face fines ranging from $10,000 to $25,000 for each instance of unauthorized disclosure. If the disclosure is found to be intentional, HIPAA provides for fines ranging from $100,000 to $250,000 and possible jail time for individuals involved in the violations.

The clock is ticking its time to get started
Bringing an enterprise into compliance with the rules set by HIPAA can seem like a very daunting task to even the most experienced executives. Nonetheless, the growing dependence on email as a mission-critical application requires that your organization implement comprehensive security and privacy policies and soon. A solid combination of security policies and the technologies to enforce those policies can ensure improved security as well as HIPAA readiness and ongoing adherence.

Despite the immediacy of the new HIPAA security rule, your organization can still achieve compliance. Learn more about how IronMail helps organizations comply with HIPAA by downloading CipherTrusts free whitepaper, "IronMail Compliance Control: Contributing to Corporate Regulatory Compliance". Failure to adhere to the new guidelines could cost your company
up to $250,000 per infraction!


On April 21, 2005 (just over three weeks from today), a new Health Insurance Portability and Accountability Act (HIPAA) security rule goes into effect. The requirements of this rule, which are basically information security best practices, focus on the three cornerstones of a solid information security infrastructure: confidentiality, integrity and availability of information.

The imminent HIPAA regulatory requirements encompass transmission, storage and discoverability of Protected Health Information (PHI). Given the widespread use and mission-critical nature of email, enforcement of HIPAA encryption policies and the growing demand for secure email solutions, email security has never been more important to the healthcare industry than it is right now.

Although many assume it applies only to health care providers, HIPAA affects nearly all companies that regularly transmit or store employee health insurance information. HIPAA was signed into law in 1996 by former President Bill Clinton, with the intent of protecting employee health and insurance information when workers changed or lost their jobs. As Internet use became more widespread in the mid-to-late 1990s, HIPAA requirements overlapped with the digital revolution and offered direction to organizations needing to exchange healthcare information.

HIPAA in the Workplace
Collaboration between employers and healthcare professionals has grown increasingly digital, and email has played an ever-increasing role in this communication. However, emails increased importance can lead to severe consequences without proper security and privacy measures implemented.

In addition to the usual concerns about privacy and security of email correspondence, even organizations that are not in the healthcare industry must now consider the regulatory compliance requirements associated with HIPAA. The Administrative Simplification section of HIPAA, which, among other things, mandates privacy and security of Protected Health Information (PHI), has sparked concern about how email containing PHI should be treated in the corporate setting. HIPAA, as it relates to email security, is an enforcement of otherwise well-known best practices that include:

  • Ensuring that email messages containing PHI are kept secure when transmitted over an unprotected link
  • Ensuring that email systems and users are properly authenticated so that PHI does not get into the wrong hands
  • Protecting email servers and message stores where PHI may exist


Organizations regulated by HIPAA must comply and put these practices in place. However, the need to comply with regulations puts particular pressure on the healthcare industry to enhance their use of technology and catch up with other industries of similar size and scope.

Privacy and Email Security
The privacy protection provisions in HIPAA pose a major compliance challenge for the healthcare industry. These provisions are intended to protect patients from disclosure of any of their individually identifiable health information. Organizations that fail to protect this information face fines ranging from $10,000 to $25,000 for each instance of unauthorized disclosure. If the disclosure is found to be intentional, HIPAA provides for fines ranging from $100,000 to $250,000 and possible jail time for individuals involved in the violations.

The clock is ticking its time to get started
Bringing an enterprise into compliance with the rules set by HIPAA can seem like a very daunting task to even the most experienced executives. Nonetheless, the growing dependence on email as a mission-critical application requires that your organization implement comprehensive security and privacy policies and soon. A solid combination of security policies and the technologies to enforce those policies can ensure improved security as well as HIPAA readiness and ongoing adherence.

Despite the immediacy of the new HIPAA security rule, your organization can still achieve compliance. Learn more about how IronMail helps organizations comply with HIPAA by downloading CipherTrusts free whitepaper, "IronMail Compliance Control: Contributing to Corporate Regulatory Compliance".
CipherTrust is the leader in anti-spam and email security. Learn more by downloading our free whitepaper, IronMail Compliance Control: Contributing to Corporate Regulatory Compliance or by visiting www.ciphertrust.com.

Labels: , , , , , ,

Thursday, November 29, 2007

Alert: New HIPAA Rules Could Affect Your Organization's Email System

On April 21, 2005, a new Health Insurance Portability and Accountability Act (HIPAA) security rule went into effect. The requirements of this rule, which are basically information security best practices, focus on the three cornerstones of a solid information security infrastructure: confidentiality, integrity and availability of information.

The HIPAA regulatory requirements encompass transmission, storage and discoverability of Protected Health Information (PHI). Given the widespread use and mission-critical nature of email, enforcement of HIPAA encryption policies and the growing demand for secure email solutions, email security has never been more important to the healthcare industry than it is right now.

Although many assume it applies only to health care providers, HIPAA affects nearly all companies that regularly transmit or store employee health insurance information. HIPAA was signed into law in 1996 by former President Bill Clinton, with the intent of protecting employee health and insurance information when workers changed or lost their jobs. As Internet use became more widespread in the mid-to-late 1990s, HIPAA requirements overlapped with the digital revolution and offered direction to organizations needing to exchange healthcare information.

HIPAA in the Workplace
Collaboration between employers and healthcare professionals has grown increasingly digital, and email has played an ever-increasing role in this communication. However, email’s increased importance can lead to severe consequences without proper security and privacy measures implemented.

In addition to the usual concerns about privacy and security of email correspondence, even organizations that are not in the healthcare industry must now consider the regulatory compliance requirements associated with HIPAA. The Administrative Simplification section of HIPAA, which, among other things, mandates privacy and security of Protected Health Information (PHI), has sparked concern about how email containing PHI should be treated in the corporate setting. HIPAA, as it relates to email security, is an enforcement of otherwise well-known best practices that include:

* Ensuring that email messages containing PHI are kept secure when transmitted over an unprotected link

* Ensuring that email systems and users are properly authenticated so that PHI does not get into the wrong hands

* Protecting email servers and message stores where PHI may exist

Organizations regulated by HIPAA must comply and put these practices in place. However, the need to comply with regulations puts particular pressure on the healthcare industry to enhance their use of technology and “catch up” with other industries of similar size and scope.

Privacy and Email Security
The privacy protection provisions in HIPAA pose a major compliance challenge for the healthcare industry. These provisions are intended to protect patients from disclosure of any of their individually identifiable health information. Organizations that fail to protect this information face fines ranging from $10,000 to $25,000 for each instance of unauthorized disclosure. If the disclosure is found to be intentional, HIPAA provides for fines ranging from $100,000 to $250,000 and possible jail time for individuals involved in the violations.

The clock is ticking – it’s time to get started
Bringing an enterprise into compliance with the rules set by HIPAA can seem like a very daunting task to even the most experienced executives. Nonetheless, the growing dependence on email as a mission-critical application requires that your organization implement comprehensive security and privacy policies – and soon. A solid combination of security policies and the technologies to enforce those policies can ensure improved security as well as HIPAA readiness and ongoing adherence.

Dr. Paul Judge is a noted scholar and entrepreneur. He is Chief Technology Officer at CipherTrust, the industry's largest provider of enterprise email security solutions. Learn how to make your email system comply with HIPAA regulations by visiting http://www.ciphertrust.com.

Labels: , , , , ,