Provider associates need security plans, too

EHR Watch, May 15, 2012

BEI Commentary: If you have an EHR you need an IT support company, or you need internal staff to support your network and hardware.  Most ambulatory practices will either partially or totally outsource their IT.  It is a good idea to work with a company that understands the healthcare vertical and its rules and regulations (shameless plug:  BEI is one such company).  Business Associates Agreements are one of the reasons why.

So you’ve been working hard to firm up your IT security protocols and systems, and you’re feeling good about the progress you’ve made.

Now, how about your myriad partners who also have access to your patients’ health information?

As this observer points out, for many providers that’s a different story altogether. He says that “while the HIPAA rules have been around for a while — the Security Rule’s compliance date goes back to 2005 — hospitals and other health care providers have not consistently devoted a significant amount of time to business associate security.” Read More