Hippa compliant computer?

[Liz S]

I heard recently from an instructor at my school that if we put any info about clients on a computer that has access to the internet it has to be 'Hippa Compliant' and this software costs like $2000!!!

Do any of you know about this software, or use it, or know anything about it? This is the first I have heard of this. I did plan on having my client list, info, ect on my computer but I don't want to buy a computer JUST for my massage business nor do I want to shell out that much money for a program.

Any way around it?

 

[natalie.anastasakis]

My understanding about HIPAA rules is that if you send any client info via electronic means, then ALL client info (for every client) must also be available via electronic means.

HIPAA has been described as the anti-privacy act, for this and many other reasons.

I guess it is something to look into, but I have never heard of a specific software requirement merely because one has access to the internet. I have a firewall and a network that tracks all activity, but those are not expensive at all.

 

[thor]

I just found this: http://74.125.95.132/search?q=cache:0--LNcX1fHgJ:www.hhs.gov/ocr/privacysummary.pdf+HIPAA&hl=en&ct=clnk&cd=2&gl=us

on page 4:

The Privacy Rule, as well as all the Administrative Simplification rules, apply to
health plans, health care clearinghouses, and to any health care provider who
transmits health information in electronic form in connection with transactions for
which the Secretary of HHS has adopted standards under HIPAA (the “covered
entities”). For help in determining whether you are covered, use the decision tool at:
http://www.cms.hhs.gov/hipaa/hipaa2/support/tools/decisionsupport/default.asp.

ETA: When clicking on the link, I get "page not found". :roll: But anyway, this says it applies "to any health care provider who transmits health information in electronic form...." So, I don't.

 

[Pleccy]

HIPAA and Minnesota statutes mandate that even if a business is not using electronic transmission in any form, the privacy considerations still remain. Under these guidelines, a massage therapist or business owner must become HIPAA compliant because we maintain client records, gather client health care information, and engage in oral communication as well as transmission of records (electronically or not).

Here is the full text of the article from which that quotation came: http://www.amtamn.org/Education/HIPAA.asp

Though specifically tailored for MN MTs, it has some good info about HIPAA for MTs in general. Refusing to transmit client info electronically does not negate your obligations under HIPAA.

That said, you don't have to invest in super-expensive software to make your computer "HIPAA-compliant" - that sounds like a ridiculous bit of scare-you. There are plenty of less expensive ways to provide a reasonable level of digital data security.

 

[Crimson Moth]

Covered Entity Charts - a PDF file.