No one in my office has a background in privacy and security and many of my employees consider the requirements to be difficult to meet and an obstacle to treating patients. How can I change the culture of my practice to one that appreciates and protects
Changing the privacy and security culture of a practice is often one of the most difficult aspects of reducing risk and becoming Health Insurance Portability and Accountability Act of 1996 (HIPAA) compliant. Making sure that patient privacy is put before employee convenience take dedication and effort. However, there are many low-cost, high impact changes that can markedly reduce risk.The National Learning Consortium (NLC) Security Risk Assessment tool can be used as a starting point for identifying cyber security risks for an organization.
In addition, your local Regional Extension Center (REC) can help make this transition easier by providing additional resources and technical support that will assist you in changing your privacy and security practices and culture. Find an REC near you.