X
Search All HITEQ Content
Security Risk Analysis Tip Sheet
CMS and OCR

Security Risk Analysis Tip Sheet

Protect Patient Health Information - Updated March 2016

Conducting or reviewing a security risk analysis to meet the standards of Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule is included in the meaningful use requirements of the Medicare and Medicaid EHR Incentive Programs. Eligible professionals must conduct or review a security risk analysis for each EHR reporting period to ensure the privacy and security of their patients’ protected health information. 

Conducting a security risk analysis is required when certified EHR technology is adopted in the first reporting year. In subsequent reporting years, or when changes to the practice or electronic systems occur, a review must be conducted.

Previous Article Objective 10 of 10 - Public Health Reporting
Next Article EHR Incentive Programs for Eligible Professionals
Print
12894

Documents to download

Please login or register to post comments.

Theme picker