HIPAA Compliant Patient Engagement: New Rules on Email and Text (SMS) for Health Care Providers and Business Associates 2015

Key Topics

• The "safe harbour 401k" - How Health Care Providers may obtain consent from patients to send PHI in unencrypted email and unencrypted text messages and not be responsible for unauthorized access to the PHI in transmission or when received by the patient
• The information that makes a message subject to HIPAA
• The requirements for a Business Associate to be able to communicate by email or text message with a patient on behalf of a Health Care Provider
• What a Health Care Provider must do if a patient does not agree to receive PHI in unencrypted email or unencrypted text message
• What a Health Care Provider must do if a patient does not agree to receive PHI in unencrypted emails or text messages
• How a Business Associate may protect itself from liability for violating HIPAA Rules about email and text messages in its Business Associate Agreement
• The Policies and Procedures Health Care Providers and Business Associates must have in place to comply with HIPAA Rules concerning communication with patients through email and text message
• How Health Care Providers and Business Associates may prove they are compliant with the HIPAA Rules through documentation

Who should Attend

• Marketing / Patient Relations Managers
• HIPAA Compliance Officials
• Risk Managers
• Health Care Practice Managers
• Information Systems Managers
• Compliance Managers
• Contracts Managers
• Legal Counsel