With today's more rigid regulatory environment, privacy and security challenges are on the rise in healthcare. Cyber crime continues, and patient information is becoming more difficult to secure. As part of the 2009 stimulus package, physicians can receive up to $44,000 in Medicare incentives for adopting electronic health records ($65,000 under Medicaid), but the federal government is also mandating tighter controls over data and information. Failure to comply with a strengthened HIPAA, plus a new Red Flag Rule that goes into effect at the end of 2010, and many other regulations can mean stiffened penalties, lawsuits, audits, fines, loss of reputation and other costly consequences. Commissioned by Managed Healthcare Executive and including expert commentary, this package of articles, checklists and links to other sources can help you navigate the thicket of new information and changes while protecting your patients and yourself.

• HITECH ratchets up HIPAA accountability
  A tougher HIPAA, a new Red Flags Rule, and the addition of "payment card" standards are tightening requirements for physicians and other healthcare providers to prevent identity theft, unauthorized access to protected health information, and loss of consumer debit and credit card information.
• The "Red Flags" Rule: What healthcare providers need to know
  The federal Red Flags Rule will require many doctors' offices, hospitals, and other health care providers to develop written programs to spot the warning signs—or "red flags"—of identity theft.
• Surveys show many healthcare providers not ready
  One survey of healthcare providers finds that 94 percent believe they are not ready to comply with privacy and security provisions of HITECH which took effect in February.
• HIPAA changes sure to make patient information vendors nervous
  Changes to HIPAA that expand liability for privacy violations beyond healthcare providers and insurance companies mean significant accountability also is falling on vendors ("business associates") who handle personal patient health information.
• Price of HIPAA violations to soar to $1.5 million maximum
  The federal government is clearing the way to increase to $1.5 million the maximum penalty for violations of rules under HIPAA.
• Privacy and security lapses will happen, so are you ready to cope with them?
  When patient data security lapses happen, they must be identified, communicated, and fixed. Here are some critical factors in accomplishing that.
• Malware can infect a medical practice, weaken its security
  An array of spyware, adware, viruses, trojans, worms, and phishing schemes waits to invade your practice over the network.
• Plain old lock is first defense against information theft
  Computer defenses can be critical, but when it comes to protecting personal information, don't forget "old school" physical security, too.
• Physicians on the go need to safeguard data
  Do you maintain the same high standards for data security when you're on the road? Here are tips for reducing the risk of a breech when you travel.
• Truncated information mandated for patient receipts
  The electronically printed credit and debit card receipts you give your patients must shorten—or truncate—the account information.
• Networks used for electronic health data must balance security and productivity
  Providing rights and privileges to individual users on a network is a significant security concern for healthcare providers because of HIPAA regulations.
• Rule finalized for defining "meaningful use" of electronic health records
  The Centers for Medicare & Medicare Services (CMS) has finalized a rule defining "meaningful use" of electronic health records (EHR), a definition awaited by many healthcare providers before taking advantage of federal incentives for investing in the technology.