Maintaining HIPAA Compliance with Cloud Based Solutions
1 like502 views
The document discusses the importance of HIPAA compliance in cloud file sharing and mobile device usage, noting significant risks such as lost or stolen devices. It highlights the healthcare use cases for cloud services, emphasizing the necessity for encryption and access control to protect patient information. The solution proposed includes using Sookasa with Dropbox to ensure HIPAA compliance through device encryption and accidental sharing prevention.
![HIPAA
Breaches
AffecLng
500+
Records
2006-‐2013
[Source:
HHS]
4.92%
1.31%
Portable
Media
Network
Server
9.43%
46.01%
12.31%
12.96%
Computer
Laptop
EMR
Paper
13.04%
E-‐mail](https://image.slidesharecdn.com/maintainginhipaacompliancewithcloudbasedsolutions-131211080129-phpapp02/85/Maintaining-HIPAA-Compliance-with-Cloud-Based-Solutions-8-320.jpg)
![HIPAA
Breaches
AffecLng
500+
Records
2006-‐2013
[Source:
HHS]
4.92%
1.31%
Portable
Media
Network
Server
9.43%
46.01%
12.31%
12.96%
Computer
Laptop
EMR
Paper
13.04%
E-‐mail
Most
breaches:
lost/stolen
devices](https://image.slidesharecdn.com/maintainginhipaacompliancewithcloudbasedsolutions-131211080129-phpapp02/85/Maintaining-HIPAA-Compliance-with-Cloud-Based-Solutions-9-320.jpg)
Maintaining HIPAA Compliance with Cloud Based Solutions
- 1. Industry leading Education Certified Partner Program • Please ask questions • For todays Slides http://compliancy-‐group.com/slides023/ • Todays & Past webinars go to: http://compliancy-‐group.com/webinar/ 855.85HIPAA www.compliancygroup.com
- 2. Maintaining HIPAA Compliance: Cloud File Sharing and Mobile Devices Asaf Cidon CEO, Sookasa
- 3. Cloud File Sharing is Booming Dropbox 200M Users Google Drive 120M Users Box 20M Users
- 4. Healthcare Use Case: Sync and Backup • Sync and backup – TranscripLons – PaLent charts – Medical bills • Low cost alternaLve – $100-‐200 per seat
- 5. Healthcare Use Case: Mobile Access • Mobile access – Access paLent charts on-‐the-‐go – Work from home – Home care
- 6. Healthcare Use Case: External Sharing • External sharing – Share medical images – Send medical bills – Send receipts to suppliers • Send big files – CT Scans, X-‐Rays
- 7. The Dark Side of the Cloud • If all my office files are synchronized everywhere… • The loss of a laptop or smartphone causes a HIPAA breach!
- 8. HIPAA Breaches AffecLng 500+ Records 2006-‐2013 [Source: HHS] 4.92% 1.31% Portable Media Network Server 9.43% 46.01% 12.31% 12.96% Computer Laptop EMR Paper 13.04% E-‐mail
- 9. HIPAA Breaches AffecLng 500+ Records 2006-‐2013 [Source: HHS] 4.92% 1.31% Portable Media Network Server 9.43% 46.01% 12.31% 12.96% Computer Laptop EMR Paper 13.04% E-‐mail Most breaches: lost/stolen devices
- 10. The Most Common HIPAA Breaches • Lost and stolen devices and portable media – Over 1,000,000 devices lost every week! – 22% of employees report they have lost a phone during 2012 • Employees inappropriately accessing, using, or transmidng PHI
- 11. Case Study: Stanford Hospital 06/2013 Stolen laptop: 13,000 paLents 01/2013 Stolen laptop: 57,000 paLents 07/2012 Stolen laptop: 2,500 paLents 09/2011 Accidental online sharing: 20,000 paLents 01/2010 Stolen laptop: 500 paLents
- 12. Top HIPAA File Sharing Risks 1. Device Loss with Unencrypted PHI 2. Accidental Sharing of PHI
- 13. Top HIPAA File Sharing Risks 1. Device Loss with Unencrypted PHI 2. Accidental Sharing of PHI 3. Unencrypted PHI on Cloud?
- 14. Top HIPAA File Sharing Risks 1. Device Loss with Unencrypted PHI 2. Accidental Sharing of PHI 3. Unencrypted PHI on Cloud? Solved by BAA
- 15. Top HIPAA File Sharing Risks Not Solved by BAA 1. Device Loss with Unencrypted PHI 2. Accidental Sharing of PHI 3. Unencrypted PHI on Cloud? Solved by BAA
- 16. Dropbox Signed BAA On-‐device EncrypLon Prevent Accidental Sharing Access Control for On-‐ device Data End User Experience and Sync Popularity (Network Effect) Box Google Drive
- 17. Ingredients of File Sharing HIPAA Compliance 1. File encrypLon on the device 2. Control access to files with white list – People – Devices 3. Audit trail and emergency access
- 18. The SoluLon 1. Device Loss with Unencrypted PHI 2. Accidental Sharing of PHI 3. Unencrypted PHI on Cloud? Solved
- 19. Sookasa: Shameless Plug Dropbox Signed BAA On-‐device EncrypLon Prevent Accidental Sharing Access Control for On-‐device Data End User Experience and Sync Popularity (Network Effect) Box Google Drive Sookasa + Dropbox
- 20. ü HIPAA Compliance ü HITECH Attestation ü Risk Assessment ü Omnibus Rule Ready ü Meaningful Use core measure 15 Free Demo and 60 Day Evaluation www.compliancy-‐group.com HIPAA Hotline 855.85HIPAA 855.854.4722