Words: 291
Unit 1 Assignment 1: Compliance Laws IS 4680 Luis Montana In order for a large public health care organization to stay operational, the organization must follow many compliance laws. There are many compliance laws set in place for many health care organizations. For a health care organization of this size, there are few compliance laws that must be adhered too; Health Insurance Portability and Accountability Act (HIPPY), Payment Card Industry Data Security Standard (PC ADS), and Serbians-Solely Act (SOX).
HIPPY required the Secretary of the U. S. Department of Health and Human Services (HAS) to develop regulations protecting the privacy and security of certain health information. To fulfill this requirement, HAS published what are commonly known as the HIPPY Privacy Rule and the HIPPY Security Rule. The Privacy Rule, or Standards for Privacy of Individually Identifiable Health Information, establishes national standards for the protection of certain health information.
The Security Standards for the Protection of Electronic Protected Health Information (the Security Rule) establish a national set of security standards for protecting certain health information that is held or transferred in electronic form. The Security Rule personalizes the protections contained in the Privacy Rule by addressing the technical and non-technical safeguards that organizations called “covered entities” must put in place to secure individuals’ “electronic retorted health information” (e-PHI).
In today’s era, everyone pays with credit cards or debit cards. This healthcare organization will need to be PC ADS compliant. PC Security Standards are technical and operational requirements set by the PC Security Standards Council (PC SC) to protect cardholder data. The Council is responsible for managing the security standards, while compliance with the PC Security Standards is enforced by the payment card brands.