HIPAA is the Health Insurance Portability and Accountability Act that regulates the creation and handling of personal healthcare information. If you create or handle personal healthcare information, that is data that can be tracked back to an individual, then you are very likely to be covered by the act. Here’s a quick look at HIPAA’s IT requirements.
http://www.youtube.com/watch?v=trchRAS69aI
Even if they don’t normally understand the jargon or lingo, a trained and qualified HR manager can help you determine exactly what needs to be in place on your end to make sure that security-wise, the IT department of your company is on the right side of HIPAA.
Thank you so much for covering this. Companies who have business relationships with US companies are made to sign contracts with provisions about HIPAA compliance.
Oftentimes, we (companies outside of the US doing business with US companies online) don’t know enough about the law to abide by it. Oftentimes, we just sign a contract not knowing what we really need to do, much like agreeing to the Terms and Conditions of software or sites. Agreeing without reading or thinking.
Heck, we don’t even know the law is until I saw this video.
This beats having to read the Act itself. Short but concise.