H&J Medical Supplies HIPAA Compliance Expert-HIPAA Compliance Guidance

Example

Advising a medical device manufacturer on how to develop privacy policies that comply with HIPAA's Privacy Rule, ensuring patient data is used and disclosed appropriately.

Scenario

A scenario could involve a company seeking to implement a new patient data management system. I would provide detailed steps on conducting a risk analysis, establishing necessary safeguards, and training staff to manage and protect patient information.

Example

Assisting a healthcare provider in conducting a thorough risk assessment of their information systems that handle ePHI, identifying vulnerabilities, and recommending mitigation strategies.

Scenario

In this case, the provider is transitioning to a new electronic health record system. I offer guidance on evaluating potential risks and vulnerabilities to ePHI during the transition and suggest strategies to address these risks effectively.

Example

Guiding a pharmacy on the steps to take after discovering a breach of unsecured PHI, including assessing the breach's impact, notifying affected individuals, and reporting to the appropriate authorities.

Scenario

A pharmacy experiences a data breach that affects several patients' PHI. I would provide a detailed walkthrough on assessing the breach's severity, determining who needs to be notified (individuals, HHS, and potentially media), and within what timeframe.