1. Compliance Planning for HIPAA 2 - What Needs to Change in Policies and
Procedures
This HIPAA compliance webinar will describe the changes to HIPAA Privacy and Security regulations (enforcement required
by September 23, 2013), and discuss how HIPAA covered entities will have to change their related and policies to ensure
compliance.
Why Should You Attend:
The HIPAA Privacy and Security Regulations have been modified in regulations previously issued as interim final rules
(IFRs) and notices of proposed rule making (NPRMs) by the US Department of Health and Human Services (USDHHS), and
the new final rules are now in effect, with enforcement required by September 23, 2013. All kinds of covered entities, and
now, business associates of covered entities and their subcontractors as well, need to review their HIPAA compliance,
policies, and procedures to see if they are prepared to meet the changes in the rules.
This 90-minute webinar will review the new regulations and discuss their effects on usual practices. You will also learn what
policies need to be changed and how. We will show what policies and evidence you need to produce if you are audited by
the HHS Office of Civil Rights. Now that there is a legislative mandate to audit compliance, and a random audit plan well
under way, you need to be prepared to respond to audit requests. It’s never been more important to review your HIPAA
compliance and meet the new requirements.
Areas Covered in the Webinar:
The new regulations will be reviewed and their effects on usual practices will be discussed, as well as what policies
need to be changed and how.
We will discuss what policies and evidence you need to produce if you are audited by the HHS Office of Civil
Rights.
The features that must be available in EHR systems will be described.
Learn how the new regulations change the way individuals have access to their records, and how much they can
find out about who has accessed their records.
Find out about how Individuals can now request certain restrictions on disclosures that you must honor.
Learn about the new requirements for disclosers of health information to apply "minimum necessary" standards.
Understand the new requirements for Business Associates to comply with HIPAA privacy protections and security
safeguards and how BAs are subject to enforcement and penalties directly by HHS.
Find out about how new limitations on marketing and fund-raising may change how entities can reach out to
individuals.
Learn all about how new audit and penalty requirements increase the need to make sure you are in compliance
before HHS OCR knocks on the door.
Who will Benefit:
This webinar will provide valuable assistance to all personnel in medical offices, practice groups, hospitals, academic
medical centers, insurers, business associates (shredding, data storage, systems vendors, billing services, etc). The titles
that will benefit are
Compliance director
CEO
CFO
Privacy Officer
Security Officer
Information Systems Manager

2. HIPAA Officer
Chief Information Officer
Health Information Manager
Healthcare Counsel/lawyer
Office Manager
Contracts Manager
Instructor Profile:
Jim Sheldon-Dean, is the founder and director of compliance services at Lewis Creek Systems, LLC, a Vermont-based
consulting firm founded in 1982, providing information privacy and security regulatory compliance services to a variety of
health care providers, businesses, universities, small and large hospitals, urban and rural mental health and social service
agencies, health insurance plans, and health care business associates. He serves on the HIMSS Information Systems
Security Workgroup, has co-chaired the Workgroup for Electronic Data Interchange Privacy and Security Workgroup,
currently serves on the WEDI Breach Notification sub-workgroup, and is a recipient of the 2011 WEDI Award of Merit. He is
a frequent speaker regarding HIPAA and information privacy and security compliance issues at seminars and conferences,
including speaking engagements at AHIMA national and regional conventions and WEDI national conferences, and before
regional HFMA chapter meetings and state hospital associations.
Sheldon-Dean has nearly 30 years of experience in policy analysis and implementation, business process analysis,
information systems and software development. His experience includes leading the development of health care related
Web sites; award-winning, best-selling commercial utility software; and mission-critical, fault-tolerant communications
satellite control systems. In addition, he has eight years of experience doing hands-on medical work as a Vermont certified
volunteer emergency medical technician. Sheldon-Dean received his B.S. degree, summa cum laude, from the University of
Vermont and his master’s degree from the Massachusetts Institute of Technology.