Message Image  

HIPAA


Topic: HIPAA Business Associate

1.  HIPAA Business Associate

Posted Jul 26, 2013 12:01 PM
This message has been cross posted to the following eGroups: 2013 HCCA Compliance Institute and HIPAA .
-------------------------------------------
Hello,

Does anyone have a Business Associate decision tree guide or template you are willing to share. Since the definition of a BA has changed with the Omnibus Rule, it would be great to provide VP/Directors a decision tree on whether a vendor meets the new criteria and requires a Business Associate Agreement,

Thank you for your help

Mary

-------------------------------------------
Mary Goodloe
HIPAA Compliance Mgr
Torrance Memorial Medical Ctr
Torrance,CA
-------------------------------------------


2.  RE:HIPAA Business Associate

Posted Jul 26, 2013 12:09 PM
This is from OCR.  Hopefully I attached it correctly.  If not, I can send it offlist.

-------------------------------------------
Diane Pringle MSN, CHC
Compliance/Privacy Officer
Conemaugh Health System
Johnstown, PA
-------------------------------------------






Attachment(s)



3.  RE:HIPAA Business Associate

Posted Jul 26, 2013 12:11 PM
This is the actual tree.  I hope.

-------------------------------------------
Diane Pringle MSN, CHC
Compliance/Privacy Officer
Conemaugh Health System
Johnstown, PA
-------------------------------------------








4.  RE:HIPAA Business Associate

Posted Jul 26, 2013 12:15 PM
Here is a link to one I found online and have been using:

http://www.hollandhart.com/pdf/Business_Associate_Decision_Tree.pdf


-------------------------------------------
Kimberly Danielson
Information Security Officer
St. Anthony Medical Center
St. Louis, MO
-------------------------------------------








5.  RE:HIPAA Business Associate

Posted Jul 26, 2013 12:48 PM
Thanks...I like this one given its graphical nature, despite it being very text heavy.

-------------------------------------------
Frank Ruelas
Privacy and Compliance Officer
Gila River Health Care
Sacaton,AZ
-------------------------------------------








6.  RE:HIPAA Business Associate

Posted Jul 26, 2013 12:21 PM


-------------------------------------------
Kelly Koogler
HIPAA Privacy Officer
OrthoVirginia
N Chesterfield,VA
-------------------------------------------








7.  RE:HIPAA Business Associate

Posted Jul 26, 2013 12:30 PM
WEDI has some good posting on BAA.  Try this website.  They have a decision tree.

www.wedi.org


-------------------------------------------
Amy Spielman
CCO, HIM Dir, RAC Coord, HIPAA Ofcr
Nemaha Valley Community Hosp
Seneca,KS
-------------------------------------------








8.  RE:HIPAA Business Associate

Posted Jul 29, 2013 12:13 PM
Having listened to last Friday's WEDI webinar (a joint WEDI and OCR presentation) 4 of 4 on BAA, it makes sense to me to use the tools that the "auditors" are using. 

-------------------------------------------
David Rothery, CHC
Deputy Compliance & Privacy Officer
Marin County
San Rafael, CA
-------------------------------------------








9.  RE:HIPAA Business Associate

Posted Jul 29, 2013 12:23 PM
Robert,

When you reference auditors...are you referring to auditors as those individuals that would be conducting the OCR HIPAA Audits?  if so, rest assured, based on my experience and those of others that were actually audited...a good number of these auditors are very new to the HIPAA learning curve..

-------------------------------------------
Frank Ruelas
Privacy and Compliance Officer
Gila River Health Care
Sacaton,AZ
-------------------------------------------








10.  RE:HIPAA Business Associate

Posted Jul 29, 2013 12:27 PM
Sorry David...meant to put your name on the last posting...too many emails and my uni-tasking brain got behind.

-------------------------------------------
Frank Ruelas
Privacy and Compliance Officer
Gila River Health Care
Sacaton,AZ
-------------------------------------------








11.  RE:HIPAA Business Associate

Posted Jul 26, 2013 12:44 PM
Unless you are dealing with those entities that were added to the definition of a Business Associate now shown in the definitions section 160.103 where it is defined, many of the decision trees or references out on the Net should still do the trick for the most part.

-------------------------------------------
Frank Ruelas
Privacy and Compliance Officer
Gila River Health Care
Sacaton,AZ
-------------------------------------------








12.  RE:HIPAA Business Associate

Posted Jul 29, 2013 9:11 AM

Wedi has one at the following link:

http://www.wedi.org/forms/meeting/MeetingFormPublic/view?id=2C09800000249 

Scroll down and you will see the link for it under "Related Files" 7.26
-------------------------------------------
Cinda Kropka MHA
Compliance/Ethics & Privacy Officer
Avita Health System
Galion,OH
-------------------------------------------








One moment, processing...