After a long wait, the U.S. government is finally set to implement the final privacy rule of the Health Insurance Portability and Accountability Act (HIPAA). Many radiology administrators have been apprehensive about the rule’s imminent arrival, but fortunately, expert guidance is available to help providers navigate its myriad provisions.
One source of concern has been the "business associate agreements" required for any entity that might handle protected health information produced by a health services provider. In a report from this week’s Healthcare Information and Management Systems Society (HIMSS) meeting in San Diego, staff editor Jonathan S. Batchelor describes how imaging facilities should go about creating written agreements with their business associates.
For one thing, HIPAA terms and conditions should be segregated into a separate contract -- this gives healthcare providers flexibility in adapting to future rule changes, and helps compartmentalize HIPAA-related issues into a single document. Imaging facilities should also ensure that contracts include provisions for mitigation -- that is, the need for business associates to address any HIPAA breach or violation.
The article includes other provisions that should be included in business associate agreements. You’ll find the story in our Imaging Center Digital Community, at centers.auntminnie.com. And while you’re there, check out our recent article on healthcare architecture, and the 10 points of facility design and construction that can be used to create a patient-friendly environment.
Stay tuned this week for more timely reports from HIMSS!