HITEQ Health Center Cybersecurity Defender Against the Dark Web

Health Centers are being inundated by an unprecedented surge in cybersecurity incidents that are having detrimental effects on healthcare worldwide. New, sophisticated threats seem to appear on a daily basis. Most importantly, these threats are primarily being targeted and spread through end users (vs health IT systems) through social engineering and phishing attack methods. 

Healthcare cybersecurity is the ultimate team sport. The responsibility goes beyond the IT staff and includes front and back office staff, doctors and nurses, patients, executives, and the board of directors. These resources are directed at all levels of the healthcare organization so that they may be proactive and aware and help to defend Health Centers against the Dark Web.

Take some time to read through some of the articles on this page and then fill out the submission form on the right and you will be rewarded with a Health Center Defender Against the Dark Web badge! This is an official badge that is submitted by the HITEQ Center as a proof of completion to the blockchain. Your credentials can be added to profiles such as LinkedIn and verified through accreditation services such as Accredible and Open Badge.

 

Compliance with 42 CFR Part 2: A Case Study with Community Medical Centers, Inc.

25999
HITEQ Center post on
Compliance with 42 CFR Part 2: A Case Study with Community Medical Centers, Inc.

Developed by HITEQ with Adapt Health Information Technology and Chiron Strategy Group

Health centers are actively expanding the substance use treatment services they offer in the community to address access to care for opioid use disorders, and more broadly to address better screening, referral and timely access to all substance use disorder (SUD) treatment. The downloadable case study below is an example of how a health center is assessing operations to comply with 42 CFR Part 2, with a particular focus on changes to their health information technology (IT) systems.

What is 42 CFR Part 2 and when does it apply for health centers? 

The purpose of Title 42 of the Code of Federal Regulations (CFR) Part 2: Confidentiality of Substance Use Disorder Patient Records (Part 2)  is to address concerns about the use of substance use disorder (SUD) information in non-treatment based settings. Part 2 is intended to ensure that a patient receiving treatment for a SUD in a Part 2 Program does not face adverse consequences in criminal or domestic proceedings such as those related to child custody, divorce or employment. Part 2 protects the confidentiality of SUD patient records by restricting the circumstances under which Part 2 Programs can disclose information. Part 2 is applicable to federally assisted programs who provide and hold themselves out as providing SUD services including diagnosis, treatment, or referral for treatment.  Providers in general facilities whose primary function is to provide diagnosis, treatment, or referral for treatment for a SUD are also considered “programs”. 

Compliance with Part 2 will likely involve a number of changes for health centers including changes to clinical documentation and data segregation in the EHR, suppression of data sharing across HIE’s and other networks, changes to workflows, and changes to patient intake and patient-facing forms. For health centers that have emphasized and pursued data sharing and exchange, putting these protections in place may feel like working backwards in systems that are designed for automated sharing. 

For more information, please see 42 CFR Part 2 Final Rule and Health Center Compliance in the HITEQ webinar archives.

The case study, available for download below, includes a 42 CFR Part 2 Regulatory Checklist that health centers may find particularly helpful to review.

Download the full case study below.

 

Documents to download

Intended AudienceHealth Center Leadership, Behavioral Health Teams and Providers, Health IT Staff, Care Team Leaders

Health Center Defender Against the Dark Web Badge Confirmation