HIPAA The Health Insurance Portability and Accountability Act (HIPAA) was passed in 1996 to standardize health information, transactions and code sets and to provide security and privacy of health information. HIPAA was intended to decrease the opportunities for fraud, abuse while reducing costs and improving access to health insurance. HIPAA Privacy has been required since April 14, 2003 while security will be enforceable by April 20, 2005. Health care providers, clearinghouses and plans are required to be in compliance with HIPAA because it covers identifiable health information in electronic, paper and oral forms.

The possibility of fines exists for those in non-compliance, however the potential liability costs and the negative organizational reputation are a bigger risk for not being in compliance. Providing a higher level of service to customers by complying with privacy and security measures only reinforces good business practices and in turn, increases revenue and customer retention.

HIPAA is about taking steps to keep patient information confidential. Compliance means that security policies are in place regarding health information is electronically transmitted, accessed and stored for up to six years. Organizations need to establish a set of policies and procedure to protect the protected health information (PHI) and the systems that maintain the PHI. BSM offers the BMC Configuration Management (Marimba) solution that enables HIPAA Compliance that supports encryption technologies and delegated administration so access to patient information and records can be restricted.

More information about HIPAA : http://www.hhs.gov/ocr/hipaa