LAW - 719F Health Information Privacy and Data Security

(2 hrs.)

This course will explore the primary legal and policy principles surrounding the use and disclosure of personal data across the health care industry - the key privacy and security laws, regulations and principles that govern how the health care industry operates. This analysis will serve as a baseline for consideration of all other privacy and data security laws around the country and around the world. This course will emphasize the primary privacy and information security principles set out in the Health Insurance Portability and Accountability Act (“HIPAA”) as a baseline framework for compliance, and will explore how these rules apply in theory and in practice. We will discuss the best approaches for overall HIPAA compliance. We also will explore emerging areas for privacy and information security, including new enforcement principles, issues related to security breaches and breach notification, and the emergence of “non-HIPAA” data as a new challenge to the privacy and data security regulatory structure. We will spend some time on issues related to privacy and medical research. We also will assess how these issues affect the business of health care, including a broad range of strategic and compliance issues affecting health care companies and others that use personal data.