Security Policies: Requirements and Best Practices for Compliance with HIPAA, 42 CFR Part 2, and Information Blocking | Webinar

Health centers face a complex compliance landscape when it comes to creating and maintaining security policies – from HIPAA Security Rule requirements for administrative, physical and technical safeguards to 42 CFR Part 2’s consent, disclosure and formal policy requirements, to the Information Blocking Rule’s exceptions under the 21st Century Cares Act. To take advantage of the flexibilities the Information Blocking Rule allows – including the Security and Infeasibility Exceptions – health centers must adopt additional written policies. These policies must not conflict with existing HIPAA and Part 2 policies, while providing a clear process to evaluate and document whether an exception applies to a given disclosure decision.

This webinar will walk attendees through the current regulatory requirements shaping organizational security policies – including recent updates to Part 2 and the Information Blocking exceptions – and provide practical strategies for building (or updating) a policy framework that satisfies all three regimes without creating unnecessary friction for patient care or data sharing.

Learning Objectives:

1. Identify the administrative, physical, and technical safeguard requirements under the HIPAA Security Rule and how they intersect with 42 CFR Part 2’s consent, disclosure, and formal policy requirements — including changes from the 2024 Part 2 Final Rule.
2. Apply the Information Blocking Rule’s exception framework — particularly the Security and Infeasibility Exceptions — to determine when a health center’s decision to withhold or restrict access to electronic health information is defensible instead of information blocking.
3. Draft or revise written policies that satisfy the documentation requirements of the Information Blocking exceptions without creating conflicts with existing HIPAA and Part 2 policies.

Audience:

• Compliance Officers
• Security Officers
• Privacy Officers
• HIM
• Operations

Presenter:

• Dianne Pledgie