title: How to avoid a HIPAA horror story.
abstract: The Health Information Technology for Economic and Clinical Health Act of 2009 significantly expands the financial risk of violations of the Health Insurance Portability and Accountability Act (HIPAA) and extends HIPAA procedures and penalties to business associates. Hospitals, physicians, and their business associates should ensure that HIPAA privacy and security provisions are adopted. Compliance efforts should focus on high-risk areas, including information access management, access control, and impermissible disclosures of protected health information.
authors: Withrow, McQuade & Olsen, LLP, Atlanta, USA. swithrow@wmolaw.com
authors: Scott C
authors: SC
authors: Withrow
mesh_terms: D057171:American Recovery and Reinvestment Act; D016494:Computer Security / Q000331:legislation & jurisprudence; D003219:Confidentiality / Q000331:legislation & jurisprudence; D017598:Efficiency, Organizational; D019983:Guideline Adherence / Q000191:economics / Q000331:legislation & jurisprudence*; D020408:Health Insurance Portability and Accountability Act; D006751:Hospital Information Systems / Q000331:legislation & jurisprudence*; D012308:Risk Management; D014481:United States