Engaging in HIPAA Security and Digital Confidentiality as a Mental Health Professional

Course Materials

Module 1: Getting Into a Security Mindset

What You Already Know About Security

How to Tune in Emotionally

Your Risk Management Lens

The Ethical and Legal Context

Module 1 Wrap Up

Module 2: Grasping the Basics of HIPAA Security Rule Compliance

Covered Entity Status

What the HIPAA Security Rule Says

Steps to HIPAA Security Compliance

Who/What Can Be HIPAA-Compliant?

Personally-Identifying Information

Business Associates and Business Associate Agreements

Workforce Management Standards

What the HIPAA Security Rule’s Scope Means to You

Module 2 Wrap Up

Module 3: Understanding Basic Technical Concepts

Moving vs. Sitting Data

What Is the Internet?

What Is Encryption?

What Is Authentication?

Tie in to HIPAA and Ethics

Module 3 Wrap Up

Module 4: Using Email, Text, Phone, and Video in a HIPAA-Compliant Manner

Types of Email

Different Ways to Text

Secure vs. Nonsecure Communication

Types of Phone Service

Videoconferencing Options

Your Communications Policy

Module 4 Wrap Up

Module 5: Handling Security Incidents and Breaches

Incidents vs. Breaches

Safe Harbor from Breach Reporting

Let Breach Notification Serve as Your Guide

Module 5 Wrap Up

Module 6: Protecting Your Technological Devices

Potential Threats

Digitally Protecting Your Devices

Using Encryption

Using Secure WiFi

Backing Up Your Data

Choosing Unique Logins

Physically Protecting Your Devices

Module 6 Wrap Up

Module 7: Using Cloud Services Effectively and Safely

What Is the Cloud?

How Safe Is the Cloud?

Advantages of Cloud Services

Your Role in Cloud Security

Data Synchronization

Financial Institutions in the Cloud

Module 7 Wrap Up

Module 8: Analyzing Information Risks

Trace the Information

Assess the Technology

Engage in Compliance

Module 8 Wrap Up

Course Wrap Up

Bibliography

American Association of Marriage and Family Therapists. (2015). Code of Ethics . Alexandria, VA: Author.
American Counseling Association. (2014). ACA Code of Ethics. Alexandria, VA: Author.
American Psychological Association. (2010). American Psychological Association Ethical Principles of Psychologists and Code of Conduct . Washington, DC: Author.
National Association of Social Workers. (2008). Code of Ethics . Washington, DC: Author.
National Board for Certified Counselors. (2012). Code of Ethics . Greensboro, NC: Author.
US Dept. of Health and Human Services. (2006). HIPAA Administrative Simplification . Washington, DC: Author.
US Dept. of Health and Human Services. (2013). HIPAA Omnibus Final Rule . Washington, DC: Author.
US Dept. of Health and Human Services. (2007, Mar). Basics of Risk Analysis and Risk Management. Retrieved Feb 6, 2014, from HHS.gov: http://www.hhs.gov/ocr/privacy/hipaa/administrative/securityrule/riskassessment.pdf

Engaging in HIPAA Security and Digital Confidentiality as a Mental Health Professional

Course Materials

Bibliography

Scheduled Maintenance