Currently, questions of health information security and medical privacy are of utmost importance in the United States. Hardly a day goes by that we do not see a featured article or publication about some aspect of medical privacy, or a story about a security breach.
HIMSS has created a Privacy and Security Steering Committee to guide implementation of strategic initiatives that promote the privacy and security of healthcare information and management systems. This Committee has set the following goal: "By 2014, all entities who use, send, or store health information meet requirements for confidentiality, integrity, availability and accountability based on sound risk management practices, using recognized standards and protocols."
In support of this goal, HIMSS has launched several work groups that are actively involved with industry changing activities to achieve this goal.
Privacy Impact Assessment Guide Now Available NEW!
The Privacy Impact Assessment Work Group has developed a guidance white paper that addresses the Privacy Impact Assessment (PIA) process for use by healthcare provider organizations. This process can be leveraged when the storage and processing of individually identifiable health information needs to be evaluated for privacy and security impact throughout the life cycle of a system, product or project, or when a privacy–focused risk assessment is needed for sharing or exchanging information with other organizations or agencies.
Please send us your comments on the PIA Guide.
The link to the paper is here