The Big Data Dilemma: Compliance for the Health Professional in an Increasingly Data-Driven World

From population health management to personal health records, it is hard to discuss the future of health care today without addressing data. "Big Data" -- defined as the ability to collect process, and interpret massive amounts of information -- is already having a significant impact on th...

Full description

Saved in:
Bibliographic Details
Published in:Journal of Health Care Compliance 2015-05, Vol.17 (3), p.5
Main Authors: Habte, M Leeann, Howell, Chanley, Warren, Adria, Freerks, Melesa, Millendorf, Steven
Format: Article
Language:English
Subjects:
Big Data
Communication
Compliance
Disclosure
Electronic health records
Health care industry
Health Insurance Portability & Accountability Act 1996-US
Health maintenance organizations
HMOs
Marketing
Personal health
Privacy
Professionals
State laws
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:From population health management to personal health records, it is hard to discuss the future of health care today without addressing data. "Big Data" -- defined as the ability to collect process, and interpret massive amounts of information -- is already having a significant impact on the industry. Data is everywhere in health care. Approximately 87% of US hospitals currently have some form of electronic medical record, a percentage which is increasing rapidly due to enhanced technology and infrastructure capacity and regulatory incentives, among other things. This article provides an overview for the compliance professional of the various federal and state laws affecting Big Data, with some key tips for implementing "best practices" in the organization. To ensure compliance with the privacy rule, compliance professionals should ensure that planned uses of Big Data without authorization fit within the categories of permissible uses. An effective cybersecurity risk management program requires an effective governance structure based on the organizations risk appetite -- just like the company would create for any other material risk.
ISSN:1520-8303