ITSPA Advises Small to Medium-Size Businesses to Secure Technology that Will Meet New HIPAA Standards

On April 20, thousands of small to medium-sized businesses (SMBs) will have to comply with the new regulations required by the Health Insurance Portability and Accountability Act, or HIPAA, that protect the electronic security of patient records, advised the Information Technology Solution Providers Alliance (ITSPA), a national, non-profit alliance that helps SMBs understand how technology and local technology providers can help them succeed.

The HIPAA security rule covers records that track physical conditions, medical treatments and insurance payments. HIPAA, signed into law in 1996, is designed to provide Americans with a number of health insurance benefits such as making coverage available to SMBs, allowing employees to enroll for coverage when they lose other health insurance, prohibiting discrimination in enrollment and premiums charged to employees based on various health-status factors, and limiting exclusions for preexisting medical conditions. Additionally, new HIPAA provisions require increased efficiency and standards related to medical insurance claims processing, as well as strict patient privacy rules.

"Industry surveys indicate that only 30 percent of health plans, or payers, and 18 percent of healthcare providers are currently HIPAA-compliant, and nearly 26 percent of payers and 40 percent of healthcare providers had experienced a security breach in the last six months. These statistics indicate that healthcare SMBs need to move forward aggressively to ensure compliance," noted ITSPA President, Russell Morgan.

As a first step, healthcare SMBs are urged to fortify their computer hardware security features. PCs and other access devices that haven't been secured make it easy for records privacy to be violated. In some instances, healthcare SMBs may need to upgrade their information technology to ensure compliance.

"The security rule requires covered SMBs to implement policies and procedures to maintain the confidentiality of patient health information. The Department of Health and Human Services (DHHS) describes the types of businesses that are covered by the various HIPAA regulations. If an SMB provides health care, health care claims processing, or is a health plan provider, it is defined as being a 'covered entity'. Any SMB that needs help in ensuring compliance with these rules can contact a qualified local Information Technology Solution Provider for assistance in meeting these obligations," added Morgan.

How To Comply With HIPAA

Members of ITSPA's Healthcare Advisory Board offered tips to SMB decision makers on how to comply with HIPAA's security regulation:

-- Lock up records and files--Keep cabinets and file cabinets locked that contain healthcare information, and use computer passwords and firewalls to protect online information.

-- Beef up computer hardware security features--PCs and other access devices that haven't been secured make it easy for records privacy to be violated.

-- Put safeguards in place--Assign someone the responsibility of handling HIPAA implementation.

-- Train employees in HIPAA rules.

-- Ask an IT solution provider for help--SMB decision makers who need more information about HIPAA can turn to their local IT solution provider or visit the DHHS Web site (www.cms.hhs.gov/hipaa/) prior to the April deadline to determine whether the security rule applies to their companies. To locate a qualified solution provider in your area, please contact Todd McGee at tmcgee@itspa.net Additional resources are available at: http://www.himss.org/ASP/topics_hipaa.asp

About ITSPA:

ITSPA, the Information Technology Solution Providers Alliance, is a non-profit (501.c.6) organization dedicated to helping small and medium companies adopt technology and grow by using local solution providers to solve business problems. SMB customers, solution providers, along with manufacturers, publishers and networking companies who use the solution provider channel, are expected to benefit from the demand for technology generated from its programs. ITSPA began operations with a funding grant from HP. Additional sponsors can be found at our website. ITSPA's national headquarters are located at 2633 McKinney Avenue, Suite 130-320, Dallas, TX 75204. The general business phone number is 214-542-6594. Visit our web site at www.itspa.net To locate a qualified solution provider in your area, please contact Todd McGee at tmcgee@itspa.net