HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message – if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.
It also will explain when Emails and Text Messages containing PHI must be encrypted and the simple 3 Step HIPAA Safeguard that fully protects Covered Entities from HIPAA violations when communicating with patients by unencrypted email and text message – even if the unencrypted transmission is intercepted.
Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools for routine communications like appointment reminders. Patients like and have the right to use them.
The Internet is awash with misinformation about Health Care Email and Text Messaging that can get Covered Entities into serious trouble. Part of the problem is a common misunderstanding of how HIPAA defines PHI. It’s much more than information about an individual’s medical condition, prescribed treatment, diagnosis or medications as the webinar will explain.
On April 1, 2021, the U. S. Supreme Court issued a unanimous ‘blockbuster’ decision about the Telephone Consumer Protection Act (TCPA) that affects Health Care text messaging. The webinar will cover that decision and explain why it did not give blanket permission to text patients. HIPAA – and the 3 Step Safeguard are still in full force and effect.
The key takeaway is how Covered Entities can protect themselves fully from HIPAA violations and comply with the patient’s right to receive unencrypted Emails and Texts containing PHI. Just a simple 3 Step Safeguard is all that is needed.

Areas Covered in this Webinar

Overview – Key Takeaways

  • When You Must Encrypt Emails and Text Messages with PHI – Exception
  • Why is this so important?
  • Temptations

HIPAA Rules for Email & Text Messaging
Key Definitions
3 Step Safeguard – Patient Emails & Text Messages
TCPA – Effect of April 1, 2021, Supreme Court Decision
When and Why You Must Encrypt
Tips for Enterprise-wide Compliance

Why You Should Attend This Webinar

You will find out how to use and document the 3 Step Safeguard to protect your organization when communicating with patients by regular Email and Text Message. The 3 Step Safeguard is a complete “Safe Harbor” from HIPAA violations and exposure to unquestionable, serious Risks if you don’t take advantage of this safeguard.

Who Will Benefit

Health Care Covered Entities

  • Health Care Providers
    • Clinics
    • Hospitals
    • Health Care Practices of all types and sizes
    • Physical, Occupational and Behavioral Therapists
  • Health Plans
    • Group Health Plan Administrators
    • Third Party Group Health Plan Administrators
    • Health Plan Administrators
  • Personnel
    • Executive Management – all Covered Entities
    • Compliance Committee – Covered Entity Board of Trustees
    • Practice Managers – Covered Entities
    • Chief Compliance Officer – all Covered Entities
    • HIPAA Compliance Officials – Privacy and Security
    • Patient Engagement and Marketing Specialists
    • Patient Outreach Coordinators
    • Risk Managers
    • Covered Entity Owners and Senior Management
    • Compliance Committee – Physician, Practitioner-owned Covered Entities
    • Attorneys for Covered Entities – In-house and Outside Counsel

Vendors and Business Associates

  • Vendors of Email and Text Message patient engagement services
  • Billing companies
  • Collection Agencies
  • Practice Management companies
  • Vendors of patient satisfaction surveys using Email and Text Messages
  • Health Care Marketing Consultants
  • Health Care Compliance Consultants
  • Law Firms

Venue: Recorded Webinar

Enrollment option

Speaker

Paul R. Hales
Paul R. Hales, J.D. is widely recognized for his ability to explain HIPAA Rules clearly in plain language. He is an attorney licensed to practice before the Supreme Court of the United States, a graduate of Columbia University Law School and Senior Counselor of the Missouri Bar with an international practice in HIPAA privacy and…

Related Events

Excel - Power Query – No Code Automation Every User Needs to Know About
Compliance Webinars
Live Webinar

Excel - Power Query – No Code Automation Every User Needs to Know About

Turn bad data into great data in minutes! Do you spend more time than is necessary importing and updating data from external sources such as databases, CSV files and web pages? Does the phrase "it's taking too long" describe how you feel about the time it takes to get your data into the right format for your reports? Do you regularly perform repetitive time-consuming "data cleaning and transforming" tasks such as removing unnecessary rows and columns, filtering out data that you don’t need, converting text to numbers or dates, splitting or merging columns, removing "weird" characters or combining files together? Would you like to be able to do all the above with the click of a button? If the answer Is yes, you need Power Query (known as Get and Transform in Excel 2016 and later). This training will focus on two main topics…How to import data into Excel from a variety of sources and how to automate the data cleaning process. Why you should attend Power Query / Get and Transform can save you a ton of time when working with imported data. In many cases when you get data from external sources, it needs work on it before it can be used. Although this can be done using Excel functionality, Power Query / Get and Transform is a lot faster and is repeatable with a couple of clicks. Topics covered Import data into Excel from sources such as text files, web pages and databases Avoid Excel’s "million-row limitation" Keep the imported data in sync with the source data using just two clicks Understanding and Managing Steps in the Power Query Editor Save a ton of time - automate the data cleaning process Who should attend? This training is classed as intermediate and is aimed at users of Excel who wish to learn about Power Query/Get and Transform to clean data (as both a one-off and a repeating process)

How to Uncomplicate the Growing Demands of HIPAA Compliance
Compliance Webinars
Live Webinar

How to Uncomplicate the Growing Demands of HIPAA Compliance

Confused about HIPAA compliance requirements and how it applies to your organization? HIPAA can be complicated!! Knowing what an organization must have in place to meet regulatory requirements can be challenging. For anyone tasked with managing a HIPAA compliance program, understanding the HIPAA security and privacy management process is critical to implementing and maintaining a comprehensive compliance program. The webinar will look at specific challenges organizations face in meeting HIPAA compliance requirements. This will include risk management plans; risk assessments; and program management. A growing concern with healthcare data is cybersecurity threats. The webinar will review critical HIPAA related information security topics. After completing this webinar, a Covered Entity or Business Associate will have a clear understanding for how to meet the growing demands of HIPAA compliance. Webinar Objectives Definitions, Rules, CFR, & Acronyms Who Must Comply with HIPAA Requirements? What are the HIPAA Security and Privacy Rules? Challenges of HIPAA Compliance What is a HIPAA Risk Management Plan? Upcoming changes to the HIPAA Privacy Rule How to prevent HIPAA data breaches from occurring Q&A Webinar Highlights Learn from an expert on the implementation of the HIPAA rules Learn what the HIPAA management process requires Learn how to uncomplicate and be able to evaluate your organization’s HIPAA compliance program Who Should Attend Compliance Officer HIPAA Privacy Officer HIPAA Security Officer Medical/Dental Office Managers Practice Managers Information Systems Manager Chief Information Officer General Counsel/lawyer Practice Management Consultants Any Business Associates that access protected health information

Nursing: CMS CoP Standards for Hospitals
Compliance Webinars
Live Webinar

Nursing: CMS CoP Standards for Hospitals

Every hospital that accepts Medicare and Medicaid reimbursement must follow the CMS (Center for Medicare and Medicaid Services) Conditions of Participation (CoPs) and it must be followed for all patients. This program will cover the nursing services section in the hospital CoP manual. Facilities with Deemed Status accredited by the Joint Commission, Health Care Facility Accreditation Program, CIHQ, and DNV Healthcare must also follow these regulations. There were some changes to the hospital nursing chapter of the conditions of participation (CoPs) in 2020. However, many of those changes are still awaiting interpretive guidelines and survey procedures. This program will discuss the often-cited areas of the CoP manual involving nursing care: plans of care, staffing, policy changes, when a RN is required in an outpatient department, documentation, supervision, nursing leadership, verbal orders, and more. Nursing services has been cited over 8,900 times according to the most recent report. Other changes in the past to the Nursing section include timing of medications, standing orders, plan of care, verbal orders, blood transfusions, IV medication, self-administration of medications and drug orders. This program will also reference the ever-changing non-discrimination regulations of Section 1557, and briefly mention other sections of the manual that impact Nursing and for which nurses should be aware. Objectives Recall that CMS has a section on nursing services that every hospital must follow even if accredited Describe the three different timeframes for which all medications must be administered Discuss that nursing care plans are a frequently cited area by CMS Recall the requirements for verbal orders Detailed Agenda Introduction into the CMS hospital CoPs manual CMS deficiency reports 2020 changes to Nursing section Recent memos affecting nursing Ligature risks Discharge Planning Non-Discrimination and Nursing Conditions of Participation - Nursing Nursing Services and 24-hour services RN on duty – recent update Organizational chart and nursing Chief Nursing Officer (CNO) responsibilities & requirements Staffing and delivery of care 24-hour nursing services and supervision RN to evaluate to care of all patients Nursing care plans Changes to the plan of care Assignment of patient care Agency nurse requirements Outpatient departments Medication administration Order required for all medications Requirements for complete drug order Medication safety and “5 Rights” Safe Injection practices Three medications timing changes Safe Opioid use Standing orders and protocols Verbal orders Blood transfusions and IV medications changes Reporting blood administration and medication errors Home and Self-administered medications CAH Nursing requirements Other manual section of importance to Nursing Restraint and seclusion Medication policies Visitation Discharge planning revised standards Appendix and Resources Who Should Attend? Chief nursing officer All nurses Nurse managers/supervisors Nurse educators Compliance officer Chief of medical staff Risk manager Patient Safety officer Senior leadership Joint Commission coordinator Regulatory officers Physicians

HIPAA and the New Rules Regarding Reproductive Healthcare
Compliance Webinars
Live Webinar

HIPAA and the New Rules Regarding Reproductive Healthcare

The Biden-Harris Administration, through the Office for Civil Rights (OCR) at the U.S. Department of Health & Human Services (HHS) has issued a Final Rule to modify the HIPAA Privacy Rule to support reproductive health care privacy. This Final Rule is one of many actions taken by HHS to protect access to and privacy of reproductive health care after the Supreme Court’s decision in Dobbs v. Jackson Women’s Health Organization that has led to extreme state abortion bans and other restrictions on reproductive freedom in 21 states. To better protect information related to reproductive health care and to bolster patient-provider confidentiality, organizations providing these services will need to implement required changes. This webinar will review those changes and provide guidance on new HIPAA Privacy Rule requirements. Webinar Objectives Definitions, Rules, CFR, & Acronyms What is Protected Health Information? Understand the Prohibitions Understand the Presumptions Understand Attestation Requirements Needed Changes to Your Notice of Privacy Practices Understand Disclosures to Law Enforcement The Complaint Process Q&A Webinar Highlights Learn from an expert who has served as a HIPAA Compliance Officer in a large organization. Learn how to understand the HIPAA Privacy Rule Final Rule to Support Reproductive Health Care Privacy. Learn what PHI can be disclosed to whom. Who Should Attend Compliance Officer HIPAA Privacy Officer HIPAA Security Officer Practice Managers Information Systems Manager Chief Information Officer General Counsel/lawyer Practice Management Consultants Reproductive Health Providers Women’s Healthcare Providers Vendor Business Associates supporting these providers