Reaching Out to Patients via Text and E-mail — Complying with HIPAA, TCPA, and CAN-SPAM

Date	Mar 23, 2018
Time	01:00 PM EDT
Cost	$219.00
Online

In order to integrate the use of e-mail and texting into patient communications, it is essential to perform the proper steps in an information security compliance process to evaluate and address the risks of using the technology.  The process, including the use of information security risk analysis, will be explained, and the policies needed to support the process will be described.  But the process must also include consideration of limitations on using PHI for marketing purposes in the HIPAA Privacy Rule.  Reaching out to patients' cell phones has its own issues and must be done properly or violations result.  And e-mail has its own restrictions under laws to reduce spam e-mail.  For each kind and type of communication, it is essential to understand what rules apply.
The stakes are high – any improper use of PHI may result in an official breach that must be reported to the individual and to the US Department of Health and Human Services, at great cost and with the potential to bring fines and other enforcement actions if a violation of rules is involved.  Likewise, complaints by a patient can bring about HHS inquiries and enforcement actions, so it is essential to find the right balance of communication.
The session will discuss the requirements, the risks, and the issues of the increasing use of e-mail and texting for the patient and provider communications and provide a roadmap for how to use them safely and effectively, to increase the quality of healthcare and patient satisfaction.  In addition, the session will discuss how to be prepared for the eventuality that there is a breach so that compliance can be assured.