HITECH and HIPAA Compliance Management

Transcription

1 Register by February 26, 2010 and save up to $300! The World Congress 2nd Annual Leadership Summit on Back by popular demand! YOU WILL LEAVE THE SUMMIT BEING ABLE TO: REALIZE the impact of reform on your business operations given the mandatory integration of increased data privacy and security efforts SHIELD your organization from the emerging liability of business associates and covered entities to ensure contract compliance in the new era of reform REPORT and track a data breach under the new notification enforcement philosophy and recent rulings ADAPT contracts with your business associates and covered entities to comply with new HIPAA law UNDERSTAND the privacy and security frameworks for receiving Medicare and Medicaid dollars: Going beyond HIPAA for the recipient of federal funds EDUCATE your team on how to build and implement risk assessments HITECH and HIPAA Compliance Management Solutions for Maintaining Compliance and Exposing Risk under the New HIT Requirements from the AARA and HIPAA Acts March 25-26, 2010 Washington, DC FEATURING TOP INDUSTRY EXECUTIVES AND THOUGHT LEADERS: Stephanie L. Bayer, JD Universal American Corporation Inspector John J. Burke Fire Prevention Officer Sandwich Fire-Rescue Department, Adjunct Professor, Boston University School of Medicine Chris Calabrese Legal Counsel American Civil Liberties Union (ACLU) Jeannette Frey, JD Fallon Community Health Plan William '"Buddy" Gillespie Vice President and Chief Technology Officer WellSpan Health Deven McGraw Director, Health Privacy Project Center for Democracy & Technology Dennis Melamed President Melamedia, LLC Uday Ali Pabrai Christopher Paidhrin Chief Executive Officer Security Compliance Officer ecfirst and HIPAA Academy Southwest Washington Medical Center Power, Pyles, Sutter & Verville, LLC Patricia Wagner, JD, PhD Member EpsteinBeckerGreen Marcy Wilder Partner Hogan & Hartson LLC MEDIA PARTNER PARTNER ORGANIZED BY

2 The World Congress 2nd Annual Leadership Summit on HITECH and HIPAA Compliance Management Dear Colleague, World Congress is pleased to present the 2nd Annual Leadership Summit on HITECH and HIPAA Compliance Management, which is designed to discuss solutions for managing risk and maintaining compliance with new HIT requirements from the AARA, HIPAA and Health Reform. Through a series of dynamic panel discussions, intensive case studies and multiple networking opportunities, attendees will take an in-depth look at the challenges that must be overcome to comply with the new rules and regulations. Topics to be discussed include: What Are the New Laws Governing Health Information Technology and What Do They Mean for You? What Actions Do You Need to Take? Update on Implementation of HITECH and ARRA Creating a Risk Assessment and the Implementation Process Enforcement Outlook: Why Prosecutors are Looking at Health Data Privacy and Security in a New Way Securing Federal Funding: What Are the System Certification Criteria Under the New Regulations? Managing the Changes to Business Associate Contracts: A Business and Legal Perspective Do Patients Have a Right to Health Information Privacy? Why You Should Care Share your Policies, Guard your Procedures; How do I Separate the Two? By attending this Summit, you will have the opportunity to hear how other organizations are managing and analyzing data to measure quality and performance. You will also learn what patients and consumers want and expect when their sensitive health information is included in an electronic health information system. We hope you will join us at the Summit that brings stakeholders together to address the challenges to managing privacy and security under the new HIT requirements. We look forward to seeing you in Washington, DC this March! Sincerely, Power, Pyles, Sutter & Verville, LLC Summit Co-Chairperson Leadership Summit on HITECH and HIPAA Compliance Management WHO SHOULD ATTEND Hospital, Health System and Health Plan Executives, Including: Chief Executive Officer Chief Operating Officer Chief Information Officer Chief Technology Officer Chief Security Officer Chief Compliance Officer Chief Policy Officer Vice Presidents/Directors of: Compliance HIPAA Privacy Security Risk Business Associates MAXIMIZE YOUR NETWORKING OPPORTUNITIES At the Leadership Summit on HITECH and HIPAA Compliance Management Meet Key Players in Your Target Market Take Advantage of 1-on-1 Sponsor/Attendee Meetings Facilitated On-Site Dennis Melamed President Melamedia, LLC Summit Co-Chairperson Leadership Summit on HITECH and HIPAA Compliance Management SPONSORSHIP AND EXECUTIVE NETWORKING PARTICIPANTS CAPTURE A TRUE ROI Through Sponsorship of the Following: Executive Tracks Keynote Sessions Networking Cocktail Reception Breakfast Symposia Market Insight Series Executive Networking Participant Networking Breaks Luncheon If you are interested in Sponsorship & Executive Networking opportunities, please contact Edward D. Cray at or ed.cray@worldcongress.com

3 Agenda - At - A - Glance THURSDAY, MARCH 25, :15 am 9:15 am 9:15 am 10:15 am 10:15 am 10:45 am 10:45 am 11:30 am 11:30 am 12:30 pm 12:30 pm 1:30 pm 1:30 pm 2:15 pm 2:15 pm 3:00 pm 3:00 pm 3:30 pm 3:30 pm 4:15 pm 4:15 pm 5:00 pm 5:00 pm 5:15 pm 5:15 pm 6:15 pm What Are the New Laws Governing Health Information Technology and What Do They Mean for You? What Actions do You Need to Take? PANEL DISCUSSION: Update on Implementation of HITECH and ARRA Share your Policies, Guard your Procedures; How do I Separate the Two? How to Create and Implement a Risk Assessment Luncheon in the Executive Networking Lounge CASE STUDY: Communication Processes to Alert the Public Under HITECH Requirements CASE STUDY: Ensuring Privacy and Security of Health Information Exchange in Pennsylvania Enforcement Outlook: Why Prosecutors are Looking at Health Data Privacy and Security in a New Way CMS Rule on EMR Meaningful Use Chairperson s closing remarks Networking, Cocktail Reception in the Executive Networking Lounge FRIDAY, MARCH 26, :15 am 9:15 am 9:15 am 10:15 am 10:15 am 10:45 am 10:45 am 11:30 am 11:30 am 12:30 pm 12:30 pm 12:45 pm Securing Federal Funding: What Are the System Certification Criteria Under the New Regulations? Managing the Changes to Business Associate Contracts: A Business and Legal Perspective PANEL DISCUSSION: Are we Implementing a Health Information System the Public Wants? Do We know What Patients Want? Do Patients Have a Right to Health Information Privacy? Why You Should Care Chairperson s Closing Remarks; Summit Adjourns **Agenda Subject to Change**

4 THURSDAY, MARCH 25, 2010 Power, Pyles, Sutter and Verville, LLC 8:15 am 9:15 am What Are the New Laws Governing Health Information Technology and What Do They Mean for You? What Actions do You Need to Take? Learn the target areas from recent HHS enforcement activities What is likely to trigger the strongest enforcement actions? What activities should be underway and which ones should wait? Hear a realistic view of what is coming and when U.S. Department of Health and Human Services Representative (invited) 9:15 am 10:15 am PANEL DISCUSSION: Update on Implementation of HITECH and ARRA Reaction to the new laws governing health information technology by the Office of National Coordinator What these provisions mean for industry and consumers/patients Panelists: Deven McGraw Director, Health Privacy Project Center for Democracy & Technology 10:15 am 10:45 am 10:45 am 11:30 am Share your Policies, Guard your Procedures; How do I Separate the Two? How much personal health information do you secure? - demographics information - social security - clinical information What and how should policies be shared? Understand what differentiates policies and procedures, why you should guard some but share others Uday Ali Pabrai Chief Executive Officer ecfirst and HIPAA Academy 11:30 am 12:30 pm How to Create and Implement a Risk Assessment How to use a risk assessment Basic guideline on how to get started and what to cover What are the necessary steps to implementing a risk assessment? Discover the practical benefits of conducting risk assessment and taking the next level Christopher Paidhrin Security Compliance Officer Southwest Washington Medical Center Marcy Wilder Partner Hogan & Hartson 1:30 pm 2:15 pm CASE STUDY: Communication Processes to Alert the Public Under HITECH Requirements Hear an overview of working with regulators including addressing and reporting within the new HITECH requirements Understand the notification process, time frame and requirements regarding press releases and member communication without causing unnecessary panic Learn the differences between federal HITECH obligations and the newly created state causes of action Stephanie L. Bayer, JD Universal American Corporation 2:15 pm 3:00 pm CASE STUDY: Ensuring Privacy and Security of Health Information Exchange in Pennsylvania Hear the ARRA and the HITECH ACT landscape and key elements for privacy and security in Pennsylvania Address common myths and misunderstandings of what is required to provide needed protections: - Privacy policies from government and stakeholders - Risk analysis and management - Technical and non-technical means to enforce the policies and mitigate risks Uncover enablers, barriers and key recommendations for the future of privacy and security in HIE William Buddy Gillespie Vice President and Chief Technology Officer WellSpan Health 3:00 pm 3:30 pm 3:30 pm 4:15 pm Enforcement Outlook: Why Prosecutors are Looking at Health Data Privacy and Security in a New Way Understanding where the real enforcement threats are Implications of the breach notification rule Why HIPAA will become a more popular enforcement tool for the federal government Dennis Melamed, MA Editor and Publisher Health Information Privacy/Security Alert 4:15 pm 5:00 pm CMS Rule on EMR Meaningful Use Determining organizational requirements for meaningful use and reporting requirements to CMS and other governing bodies for ensured compliance The convergence between policy, law and technology: Breaking down the silos and painting a holistic picture for adherence and compliance How your compliance strategy and EHR strategy can (and should!) more forward together CMS Representative (invited) 5:00 pm 5:15 pm Chairperson s closing remarks 5:15 pm 6:15 pm Networking, Cocktail Reception in the Executive Networking Lounge 12:30 pm 1:30 pm Luncheon in the Executive Networking Lounge

5 FRIDAY, MARCH 26, 2010 Dennis Melamed President Melamedia, LLC 8:15 am 9:00 am Securing Federal Funding: What Are the System Certification Criteria Under the New Regulations? Understand the components systems must have for eligibility of federal funding? What are the technical functionalities required and who will certify going forward? Learn that reporting requirements, what needs to be reported and how to accomplish within HHS compliance Office of National Coordinator of Health Information Technology Representative (invited) 9:00 am 10:00 am Managing the Changes to Business Associate Contracts: A Business and Legal Perspective New requirements covered entities must comply with respect to their business associates and the new compliance obligations for business associates New provisions they need to add to their business associate agreements from a legal perspective Provisions they should add to their business associate agreements from a business perspective Strategies for updating all business associate contracts and some lessons learned Challenges and opportunities associated with the new requirements Jeannette Frey, JD Fallon Community Health Plan Patricia Wagner, JD, PhD Member EpsteinBeckerGreen 10:00 am 10:30 am 10:30 am 11:15 am Planning Hospital HIPAA Operations During a Disaster Methods to establish a team to handle patient privacy issues during large scale, high profile events for health care facilities Uncover how IT personnel can be blended into a multi-agency patient data theft prevention team and how it will enhance your HIPAA compliance strategy Assess the implementation process of the National Incident Management System requirements into Hospital Emergency Response Teams Hear how several hospitals were ill-prepared to handle privacy during drills and tools you need to prevent this in your organization Inspector John J. Burke Fire Prevention Officer Sandwich Fire-Rescue Department Adjunct Professor Boston University School of Medicine 11:15 am 12:00 pm PANEL DISCUSSION: Are we Implementing a Health Information System the Public Wants? Do We know What Patients Want? Do patients have a right to not have physicians disclose their health information? Are physicians operating in the best interest of the patient when using patient health information without the patient s consent? Hear patient advocate position on how to ensure health information technology improves quality of care, reduces costs and can have a positive effect on health care Moderator: Power, Pyles, Sutter and Verville, LLC Panelists: Chris Calabrese Legal Counsel American Civil Liberties Union (ACLU) Patient Privacy Rights Representative (invited) National Partnership for Women & Families Representative (invited) 12:00 pm 1:00 pm Do Patients Have a Right to Health Information Privacy? Why You Should Care Do patients have a right to not have health information used and disclosed without their consent? If identifiable health information is used and disclosed without consent and over the patient s objections and expectations, can you be sued by the patients? If the answer to these questions is yes, what should health care providers and business associates do to reduce their liability and avoid damage to their business? Power, Pyles, Sutter and Verville, LLC 1:00 pm 1:15 pm Chairperson s Closing Remarks; Summit Adjourns Compliance Certification Board (CCB) This program has been approved for 13.2 Compliance Certification Board (CCB) Continuing Education Units in Compliance Training and Education and Auditing and Monitoring for Compliance. Granting of prior approval in no way constitutes endorsement by CCB of the program content or the program sponsor. CCB program code #WC-001

6 Registration Fee: Register By Register By 02/26/ /25/2010 Standard Conference $1795 $2095 Health Plan Conference $1495 $1795 Hospital & Health System Conference $1095 $1395 Government/Academic Conference $395 $395 Early Bird Discount Register by February 26, 2010 and save up to $300! Fee for the conference includes continental breakfast, lunch, reception, refreshments and web-based conference documentation available pre-and post event through a password protected web-site. Please make checks (in U.S. funds drawn on a U.S. bank) payable to WC Research, Inc. (No personal checks accepted) *Verification may be required for Hospital and Health Systems/ Academic/Government rate.). Please contact us should you have any special needs Substitution & Cancellation: Your registration may be transferred to a member of your organization up to 24 hours in advance of the conference. Cancellations received in writing on or before Friday, March 12, 2010 will be refunded, less a $295 administrative charge. No refunds will be made after this date; however, the registration fee less the $295 administrative charge can be credited to another World Congress conference if you register within 6 months for the date of this conference. In case of conference cancellation, World Congress liability is limited to refund of the conference registration fee only. World Congress reserves the right to alter this program without prior notice. Satisfaction Guaranteed: World Congress stands behind the quality of its conferences. If you are not satisfied with the quality of the conference, a credit will be awarded towards a comparable World Congress conference of your choice. 5 Easy Ways to Register WEBSITE worldcongress.com/ hipaa So What s in it for Me? PHONE outside the U.S. Attend this mission critical Summit and return to the office with the tools and solutions necessary to ensure compliance and maximize your piece of the stimulus pie! Team Discount: Your organization may send 1 executive FREE for every 3 delegates registered. All registrations must be made at the same time to qualify Venue and Accommodations: Doubletree Hotel Washington DC 1515 Rhode Island Avenue, NW Washington, DC Reservations: Room Rate: Single/Double Occupancy Rooms: $195 per night; includes complimentary internet in all guest rooms Cut-Off Date: Friday, March 5, 2010 Be sure to mention you are with World Health Care Congress Leadership Summit to receive this special rate! Fly Jet Blue and receive a 5% discount off the lowest available fare by simply booking online! Please visit and use code HITECH2010 World Congress 500 West Cummings Park, Suite 5200 Woburn, MA FAX wcreg@worldcongress.com Please include all information requested on registration card. ARE YOU PREPARED? Managed Healthcare Market Newsletter Offer: FREE 3-Month Trial Offer from Managed Healthcare Market Newsletter Sign up for a FREE three-month trial subscription to Managed Healthcare Market Newsletter a $225 value and profit from our unique blend of data, news and analysis on key trends shaping the future of managed care. A confirmation with instructions on activating your FREE trial subscription will be sent to you as soon as your registration is received. No strings. No cost. No obligation. Available to new subscribers only. Copyright Corporate Research Group. PRSRT STD U.S. Postage PAID Gallery MAIL Registration Dept. World Congress 500 West Cummings Park, Suite 5200, Woburn, MA Register by February 26, 2010 and save up to $300! The World Congress 2nd Annual Leadership Summit on HITECH and HIPAA Compliance Management Solutions for Maintaining Compliance and Exposing Risk under the New HIT Requirements from the AARA and HIPAA Acts March 25-26, 2010 Washington, DC Is your organization ready to move into the new era of compliance? Can you afford the true cost of a data breach, which compromises patient safety, institutional reputation and your bottom line? Do you have the tools and mission-critical solutions necessary to shield liability and tackle privacy and security roadblocks head on? To register, please visit Phone: Fax: wcreg@worldcongress.com