HIPAA compliance

Replies to This Discussion

Permalink Reply by Will Print on November 25, 2009 at 10:06am

Thanks Jed,

▶ Reply to This

Permalink Reply by Jed Evans on December 8, 2009 at 10:15am

Hi Will,

If you have any feedback on the info that I sent you a while back send me an e-mail at jede@maxgraphics.com . Thanks.

▶ Reply to This

Permalink Reply by Michael Jahn on December 8, 2009 at 5:46pm

Not to pile on, but unless you asking a printer to print/mail medical information from some health care service provider to a patient - HIPAA has no bearing. I like to share that about 85% of patient information is distributed via a fax machine, which is hardly "HIPAA Complaint" nor can it be made to be HIPAA complaint. Fact is, the majority of reported HIPAA incidents are faxes sent to a wrong number.

My point is anyone can follow the guidelines - and companies can be audited - it only takes one wrong digit to create a reportable HIPAA incident, and here in California anyway, you need someone to follow up on them and resolve them in a very short time frame of large fines are levied.

▶ Reply to This

Permalink Reply by Will Print on December 9, 2009 at 9:47am

Hi Michael,
Thanks for the input. I couldn't agree with you more. HIPPA compliance has so many grey areas. The requirement for a HIPPA compliant Plant is coming from our clients. These are regulations that are set in stone. If we fail to provide this for them we would not have the opportunity to bid. It's funny I remember a while back doing research on HIPPA and one line sticks in my mind..."You need to take reasonable measures". That really leaves it wide open , since "Reasonable Measures" was not defined.

▶ Reply to This

Permalink Reply by Michael Jahn on December 9, 2009 at 1:41pm

My Wife is the executive Administrator HIPAA Compliance Officer at a 400 bed hospital here in Northridge, California. I can tell you directly that the only thing HIPAA care about is 'are you set up to deal with an incident" - which would mean, you would need to have someone who "acts" as the HIPAA Compliance Officer at the facility - but honestly, lets say that the mailing database (which would be most likely provided to the printer) has an error in it - when (or if) this is discovered and reported, this is NOT the printer that is fined - it is the health service provider - the only recourse the health service provider might have is to sue for damage if and only if they can PROVE that the error was caused by some malfunction at the printers site or the printers system (somewhat unlikely BTW!)

So, I remain confused as to why some health service provider thinks that they need a "HIPAA Compliant Manufacturer" - if they are bonded, that all they need to be.

▶ Reply to This

• ‹ Previous
• 1
• 2
• Next ›
• Page