B.Y.O.D. in a Healthcare Setting - Risks, Policies and Procedures, Access Controls and More

Why Should You Attend:

The push is growing to allow clinicians, other workforce members and patients to use their own devices to access PHI. It’s convenient, uses 4G for speedy transmission and works anywhere there is a wireless network. Good idea, right? Not necessarily.

• Do you have written B.Y.O.D. policies and procedures, or access controls, or VPNs with proper security?
• Do these devices store any PHI? Is their data encrypted either at rest or during transmission?
• What happens if an identity thief takes the device or the workforce member loses it in a public place?
• Are you prepared for the brain damage and enormous expense of a breach investigation and/or breach notification?

This 90-minute webinar will discuss the current technology, the challenges and best practices for protecting the privacy and security of Protected Health Information (PHI) when clinician, staff or patient, demand for B.Y.O.D. is growing.

Areas Covered in the Webinar:

• B.Y.O.D risks
• Best practices for managing these risks
• Gaining by-in and building workforce support for effective B.Y.O.D. policies and procedures
• Trust but verify compliance
• Preparing for the worst
• “I can’t find my phone, it has unencrypted ePHI of my current patients on it; help me!”

Who Will Benefit:

This webinar will provide valuable assistance to any covered entity or business associate including medical offices, group practices, hospitals, academic medical centers, insurers, law firms, accounting firms, shredding companies, data storage facilities, systems vendors, and billing services. Workforce personnel who should attend include:

• Compliance director
• CEO
• CFO
• Privacy Officer
• Security Officer
• Information Systems Manager
• HIPAA Officer
• Chief Information Officer
• Health Information Manager
• Healthcare Counsel/lawyer
• Office Manager
• Contracts Manager

Instructor Profile:

Paul Frisch, served as the General Counsel to a physician trade association for almost 25 years, until 2009. He is the Compliance Services Director for Apgar and Associates, where he counsels covered entity and business associate clients nationally on issues related to HIPAA Privacy and Security Rules, including compliance strategic planning, breach investigation, risk analysis, compliance audits, and Health Information Exchange implementation.

Long involved in regulation and compliance issues, in 2003, Paul was the Vice-Chair of the Oregon Legislature’s Task Force on Medical Privacy and assisted in securing the passage of comprehensive legislation to conform Oregon’s healthcare privacy laws to the federal HIPAA regulation. He served as a member of the Oregon Governor’s Health Information Security and Privacy Collaboration (HISPC), laying the groundwork for exchange of electronic health information statewide. He has also counseled clients in compliance matters relating to the Stark Law, fraud and abuse, HIPAA, and PCI DSS as well as other consumer protection rules and regulations. Paul is a member of the International Association of Privacy Professionals.

Co-author of a book on supporting physicians in professional crisis published by Oxford University press, Paul is a founding advisory board member of physicianlitigationstress.org. This website is dedicated to decreasing the likelihood that any practitioner involved in or facing the threat of medical malpractice litigation has to do so alone.

Since 2004 Paul has been an adjunct professor at the University Of Oregon School Of Law in Eugene, Oregon where he teaches Health Law as well as Bioethics to second and third year students.

Follow us :