A 2-Day, instructor-led, interactive session with a focus on the fundamentals of developing HIPAA-Compliant Privacy Policies and Procedures, and Implementation Methodology. Topics covered include Privacy Review, Design & Implementation Framework Discussion, and hands-on experience creating HIPAA-compliant Policies and Procedures.

HIPAA Privacy Review
A detailed review of all key impacts of the HIPAA Privacy Rule for both Covered Entities and their Business Associates. Differences between the HIPAA Privacy Rule and the recent April 2002 NPRM are analyzed for their impacts of the April 14, 2002 Privacy compliance deadline (2 hours).

Framework for Developing Privacy Compliance
A framework is examined for developing an enterprise program to manage the substantial organizational and culture change required to make a Covered Entity or Business associate fully HIPAA compliant for Privacy. An analytical approach is developed for determining the scope of your organization’s Privacy compliance needs, understanding the differences between simple and complex organizations, an overview of the top-down, bottom-up and hybrid approaches to developing Privacy P&P, the workgroup approach, including overview of methodology, process, deliverables and work plan (1 hour, 30 minutes).

Uses and Disclosures Compliance
Interactive group session introduces the workshop environment. Depending on the pace of the structured discussion, one or two of the following topics will be covered: Agreed Upon Restrictions, Broker Communications, Crime victims, Emergency Situations, Employer/Plan Sponsor, Marketing and Fundraising, Permitted under Privacy Rule, Personal Representatives, Required by Law, Requiring Opportunity for Individual to Object, Research Activities, Underwriting, and Whistle Blowers (1 hour, 30 minutes).

Administrative Requirements Compliance
Interactive group session providing further exposure to the workshop environment. One or two of the following topics will be covered: Documentation Requirements, Employee Sanctions, Mitigation, Privacy Official, Revisions Necessitated by Law Changes, Staff Training, Authorization Forms, and the Complaint and Grievance Process (1 hour, 30 minutes).

Individual Rights Compliance
One or two of the following topics will be covered in workshop: Inspect and Copy, Request Amendment, Request Confidential Communication, Request Restriction of Disclosures (1 hour, 15 minutes).

Minimum Necessary Compliance
Minimum Necessary will be covered in workshop. Time permitting, the Privacy Notice, Business Associate Contracts, Deceased Individuals and De-identification will be discussed (1 hour).

HIPAA Expert Panel
Dial-in Q&A panel with nationally recognized HIPAA experts (1 hour).

Framework for Implementing Privacy Compliance
A framework is examined for implementing an enterprise Privacy program, including adoption of a phased approach to awareness training and workforce-member specific, role-based training by job function, instructor-led vs. Web-Based Training, key considerations for ongoing compliance and long-term change management (1 hour, 30 minutes)

HIPAA Roundtable
Open discussion and general Q&A (1 hour, 30 minutes).

• Binder with complete workshop exercises and presentations
• Full searchable text of DHHS Privacy Rule and April 2002 NPRM
• Additional legal authority documents
• Industry compliance white papers
• Sample worksheets and workshop templates and tools
• Sample Privacy Policies and Procedures, Notices and Forms

Information

For more detailed information, please call 1-800-569-1222 or click on the link below. Request more information     Contact a sales rep