by Daniel J. Solove
In the April issue of the Journal of AHIMA, I authored two short pieces about HIPAA:
HIPAA Turns 10: Analyzing the Past, Present, and Future Impact
84 Journal of AHIMA 22 (April 2013)
HIPAA Mighty and Flawed: Regulation has Wide-Reaching Impact on the Healthcare
84 Journal of AHIMA 30 (April 2013)
The first piece provides an overview of HIPAA and its evolution. The second involves an analysis of HIPAA’s strengths and weaknesses. Overall, I find HIPAA to be one of the most effective privacy regulatory regimes. HIPAA is very effective in large part because it requires privacy and security officials who have responsibility over these issues. These officials develop policies and procedures, perform assessments, and provide HIPAA training to employees, among other things. Privacy laws are not self-executing, and enforcement agencies have limited enforcement resources. The effectiveness of the law depends upon each organization taking compliance seriously, and this starts with a governance structure, awareness training, and things that create a culture of compliance. Many other privacy laws don’t realize this, and fail to include the robust governance components of HIPAA.
The entire issue is here. Copyright belongs to Journal of AHIMA.
* * * *
This post was authored by Professor Daniel J. Solove, who through TeachPrivacy develops computer-based privacy training, data security training, HIPAA training, and many other forms of training on privacy and security topics.
If you are interested in privacy and data security issues, there are many great ways Professor Solove can help you stay informed:
* Professor Solove’s LinkedIn Influencer blog
* Professor Solove’s Twitter Feed
* Professor Solove’s Newsletter