Cybersecurity for Health Care Vendors

The new HIPAA rules extend responsibilities to those who create, receive, transmit or maintain individually identifiable health information on behalf of health care providers, health plans and other HIPAA-covered entities, also known as Business Associates. Under the new rules, Business Associates are directly liable for non-compliance with certain HIPAA provisions and are subject to direct enforcement by the U.S. Department of Health & Human Services for failure to satisfy any of these requirements.

This panel discussion, featuring Jennifer R. Breuer, David A. Mayer, Sara H. Shanti and Fatema Zanzi covered the expanded definition and responsibilities of business associates.

Topics addressed include:

• The impact of changes to business associate requirements – and how they apply to vendors providing services to health care providers
• Strategies to achieve compliance and limit liability
• Overview of the HIPAA compliance audit protocol – what you need to know, and how to prevent issues that could lead to violations and fines
• Breach notification requirements – understand your obligations and potential costs if you are involved in a breach