The Big Data Dilemma: Compliance for the Health Professional in an Increasingly Data-Driven World

• Published in: Journal of Health Care Compliance 2015-05, Vol.17 (3), p.5
• Main Authors: Habte, M Leeann, Howell, Chanley, Warren, Adria, Freerks, Melesa, Millendorf, Steven
• Format: Article
• Language: English
• Subjects: Big Data; Communication; Compliance; Disclosure; Electronic health records; Health care industry; Health Insurance Portability & Accountability Act 1996-US; Health maintenance organizations; HMOs; Marketing; Personal health; Privacy; Professionals; State laws
• ISSN: 1520-8303

From population health management to personal health records, it is hard to discuss the future of health care today without addressing data. "Big Data" -- defined as the ability to collect process, and interpret massive amounts of information -- is already having a significant impact on the industry. Data is everywhere in health care. Approximately 87% of US hospitals currently have some form of electronic medical record, a percentage which is increasing rapidly due to enhanced technology and infrastructure capacity and regulatory incentives, among other things. This article provides an overview for the compliance professional of the various federal and state laws affecting Big Data, with some key tips for implementing "best practices" in the organization. To ensure compliance with the privacy rule, compliance professionals should ensure that planned uses of Big Data without authorization fit within the categories of permissible uses. An effective cybersecurity risk management program requires an effective governance structure based on the organizations risk appetite -- just like the company would create for any other material risk.