1.

Solve : Is anyone having to deal with BYOD issues at work or HIPPA compliance??

Answer»

I am now working in a small hospital admin office, and we are dealing with the issue of our network, and HIPAA compliance.

This article talks about the BRING Your Own Device (BYOD) issues we are also having to deal with:

http://pusz4frog.wordpress.com/2012/04/30/tigertext-the-future-of-hipaa-compliant-text-messaging-for-hospitals-and-doctors-and-the-solution-to-doctors-byod-requirements/

So we are also dealing with the issue that Doctors are using iPads and smartphone to access their hospital emails and patient files on the network, and then copying/pasting the info into their text messages to other doctors, nurses and patients. This really opens the hospital up to possible HIPAA fines and lawsuits.

Now the above article recommends Tigertext as a HIPAA compliant form of secure texting which could take care of that issue since the message is on a closed network and the messages can be deletes by the hospital, or they can be set to automatically delete.

But what about a similar app that does the same (as Tigertext does for text messages) for emails they send via their personal email accounts?

Anyone know of such an app?

Is anyone else having to deal with these issues at work, any advise on how you deal with HIPAA and BYOD?What is the possibility of making everyone read this 25 page document?
Quote

SUMMARY OF THE 
HIPAA PRIVACY RULE
http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary/privacysummary.pdf
Not being in the medical profession nor inclined to read the applicable regulatory instruments you refer to i make the following observation.If i read your concern correctly it is a potential for hospital (maybe your own) vulnerability to the behavior of medical "professionals" to adherence and compliance with existing rules of data communications. It falls to the professionals if so advised by authority (you or the Administrator if that is not you) to follow directives. If they should be aware and there is doubt if they are i would believe information as to what is required needs to be directed at them either through group meetings or direct personal advisory. Pointing out the "legal"requirements with attendant consequences if not adhered to would also be a good idea. If the failure to adhere continues after that administrative sanctions (appropriate to hospital liability) should be applied as related to hospital disciplinary codes. ONE cannot prevent stupidity or willful misconduct but place the onus of responsibility (after enlightenment) where it properly belongs.truenorthSounds like you need full endpoint SECURITY.  If you google that term, it might set you on the right path.  As to how to lock down personal email accounts - I know of no way.  I think you'd have to force email to REMAIN within certain restricted channels (and make it a disciplinary offence if this policy were breached).

The following search reveals quite a few avenues of enquiry: http://duckduckgo.com/?q=hipaa+email+compliant+service


Discussion

No Comment Found

Related InterviewSolutions