Leon Rodriguez, Director, HHS OCR, discusses HIPAA / HITECH Enforcement Last Week (HealthBlawg)

« Call for Submissions - Health Care Social Media Review No. 19 | Main | HealthCare SocialMedia Review No. 19 - Festivals of Lights Edition »

December 16, 2012

Leon Rodriguez, Director, HHS OCR, discusses HIPAA / HITECH Enforcement Last Week

View the story "Leon Rodriguez, Director, HHS OCR, discusses HIPAA / HITECH Enforcement Last Week" on StorifyLeon Rodriguez, Director, HHS OCR, discusses HIPAA / HITECH Enforcement Last WeekThis interview was one of the highlights of last week's Privacy and Security ForumStorified by David Harlow · Sun, Dec 16 2012 19:59:17One of the highlights of last week's Privacy and Security Forum was Bernie Monegain's interview of Leon Rodriguez. I livetweeted the session, and share here what we heard live from the source in Boston.Photo: Leon Rodriguez, OCR director, talks with @Bernie_HITN at #psforum12 http://pic.twitter.com/qVCYQNsoChip Means#PSForum12 session w Leon Rodriguez Dir #OCR intvw’d by Bernie Monegain EIC @HITnewstweet beginsDavid HarlowLeon Rodriguez #ONC when asked for ETA of #HIPAA #HITECH regs pleads no comment #psforum12David HarlowLeon Rodriguez sees each #OCR case brought, penalty levied, as roadmap for compliance for ea diff sector w/in #healthcare #psforum12David HarlowRodriguez #OCR Past experience as prosecutor& as GC for a CE informs perspectv that enforcmnt nds 2B cogniznt of business reality #psforum12David HarlowRodriguez: We look for adherence to process set out in regs. KPMG sig finding - failure to conduct risk analysis #psforum12David HarlowRodriguez: So w/o even looking at content of analysis - concerned abt folks not even doing it. #psforum12David HarlowRodriguez: CEs either encrypt or don’t even conduct analysis abt whether to encrypt #psforum12David HarlowQ put to Rodriguez: Why don’t CE’s do the risk analysis? Talks abt Fraud&Abuse history. #Privacy compliance in midst of evolution #psforum12David HarlowRodriguez: #OCR workload quintupled since #HIPAA & #HITECH compliance work given to them #psforum12David HarlowRodriguez: #OCR going beyond reactive model of complaint investign. Risk-basd audits starting; sim proactv effrts on civ rts side #psforum12David HarlowRodriguez cataloguing simple stuff to minimize consequences of human frailties (mix of policy & tech) #psforum12David HarlowRodriguez: #OCR now working on formula for monetary restitution to subjects of breaches #psforum12David HarlowRodriguez: #OCR goal is to est permanent audit program beyond pilot, to be funded by $$ collected thru penalties assessed #psforum12David HarlowRodriguez #OCR looks first at whether CE conducted root cause analysis of breach and whether addressed #psforum12David HarlowRodriguez: I won’t use name “wall of shame” Purpose of the breach notification program is to ID vulnerabilities & remediate them #psforum12David Harlow

David Harlow
The Harlow Group LLC
Health Care Law and Consulting

December 16, 2012 at 11:03 PM in Health care policy, Health Law, HIPAA | Permalink

TrackBack

TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a00d83451d52c69e2017d3edf5857970c

Listed below are links to weblogs that reference Leon Rodriguez, Director, HHS OCR, discusses HIPAA / HITECH Enforcement Last Week:

Comments

About

Book Me

Subscribe! RSS/email

Click Here to Subscribe to Our New RSS Feed
Subscribe - RSS
Enter your Email
Let's Get Social

Reviews & Awards

"[Harlow is one of] a select few healthcare experts whose tweets - and blogs - offer some of the best reads in the industry." Healthcare IT News
"[Harlow is one of the top Health IT] sources providing credible, thought-provoking information and insights." Health Data Management Magazine
"Harlow is one of the most ... articulate communicators on health care law issues today." Fierce Healthcare
An "influential voice" ... a "must-read industry blogger" SmartBrief
"[Harlow] offers both expert insights and easy-to-understand analysis." Medscape

Top 5: Editors' Choice Award Top 10: Consumers' Choice
LexisNexis Insurance Law Community 2011 Top Blogs of the Year
2010 "Rx for Excellence - Heroes From the Field" Award from Massachusetts Medical Law Report
The ABA Journal named HealthBlawg one of the Top 100 Blawgs of 2009
LexisNexis Insurance Law Community 2009 Top Blogs of the Year