Will Privacy Kill Innovation?

It’s a tug of war. On one side: fast-moving technologies, new business practices, new digital behaviors, the democratization of analytics and the massive adoption of artificial intelligence (AI) and machine learning technologies. On the other side: the fundamental right of individuals to protect their privacy.

It’s a tug of war between data-driven innovation and privacy, and the balance is not right – privacy laws needed to be reinforced to match the changes driven by technological innovations. When it comes to privacy and personal data protection, the previous EU directive was drawn up in 1995. That was before the massive adoption of internet, social networking and e-commerce. Since then, the world has changed. It has become data-driven, and personal data is the new gold.

Personal data is everywhere, highly accessible, and technologies are making it easy to use this data. As a result, privacy has never been as exposed.

But awareness is building up. Massive data breaches and revelations about the inappropriate use of personal data, or the lack of protection for it, are bringing the question of privacy to the top of the headlines.

With the now-active General Data Protection Regulation (GDPR), the planets are aligning for a complete revamp of what privacy means, how personal data is handled, and what it means for organizations and their ability to innovate with data.

In this tug of war, the balance has started to even out.

Leaving Privacy Out of the Game

Innovating with data brings a lot of benefits to companies, people and society in general. But it can also expose the privacy of individuals in unprecedented ways.

The documentary Pre-Crime shows how police enforcement authorities in the United States are using large amounts of data and machine learning algorithms to predict the likelihood of somebody committing a crime or to identify places and times where a crime is likely to be committed. Surely, preventing a crime from happening is better than having to deal with the consequences of the crime.

But what if a person is wrongly targeted with preventive measures? Tagging someone as a potential high-risk criminal can have dramatic impacts on their life such as reputational damage, inability to get a loan, or inability to get job in a governmental agency. Who is accountable for making that decision? What logic did the program use to reach that conclusion? What data was used, and is it accurate? If not, how do we correct the data and get the person off the list?

The question of accountability is even more critical when using machine learning algorithms. The developer who coded the program most likely doesn’t know anything about crime or the socio-economic and psychological factors that lead to crime. He or she doesn’t even know what the program will eventually do, as it is designed to change over time, “learning” from the data.

Another example of disruptive innovations that raise privacy concerns is the recent breakthrough in face recognition technologies. Face recognition is not new; it has been used for some time now, in places such as border control, or by Facebook to flag people in our photo albums. But face recognition is now becoming mainstream, with exponential adoption across many domains and industries.

In parallel, the technology itself is getting better every day. For instance, research has shown that it is possible to reconstruct the face of a person based on his or her DNA. That can be very useful when it comes to identify the victims of an accident, or to catch the criminals using the DNA left behind. But the same techniques can be abused by authoritative regimes to monitor citizens’ whereabouts and track down political opponents.

In the same way as driving a car safely requires drivers to learn and respect the code of conduct and rules defined by society for road usage, innovating with data requires organizations to learn and respect the rules and regulations designed to protect the privacy of individuals.

Read More: http://bit.ly/2NUP84J

Understanding HIPAA requirements for safeguarding PHI

Meeting the legal requirements required of a healthcare provider hinges on and depends directly on a clear grasp of HIPAA compliance requirements. A thorough grasp of HIPAA compliance entails being fully equipped with all the knowledge needed to put the proper policies and procedures in place. This is because providing the appropriate patient rights and controls on the uses and disclosures of Protected Health Information (PHI) is one of the hallmarks of being in compliance with HIPAA.

So, any organization that is being audited or is the subject of a compliance review has to show to the government that it not only has the ability to demonstrate how it is addressing all of the required security safeguards; but that it also has the documentation necessary for safeguarding patient PHI.

Knowledge of the fundamentals is necessary

Solid grasp of HIPAA compliance requirements is necessary on the part of a healthcare practice, business or organization to understand all that it takes for protecting PHI. Complete and thorough understanding of the fundamentals of HIPAA compliance requirements is a must for an entity that has to ensure that the safeguards it currently has are good enough to withstand government scrutiny.

This is necessary for HIPAA implementation’s own sake; further, there is another major reason why healthcare practices, businesses or organizations need to have very sound knowledge of the HIPAA requirements. It is the significant rise in the number of HIPAA data breaches. Only a proper understanding HIPAA compliance requirements help entities understand which requirements they need to meet in order to safeguard PHI.

Hear from the expert on how to show compliance with HIPAA requirements

Given the enormity of the need for understanding HIPAA requirements in toto; it is necessary for entities to know clearly what needs to be done to facilitate this. This is the knowledge a webinar from MentorHealth, a leading provider of professional trainings for the healthcare industry, will be providing. The speaker at this webinar is Jay Hodes, who is President and Founder, Colington Security Consulting, LLC.

In order to gain the fullest understanding of the requirements needed for HIPAA compliance and all the aspects related to it, please register for this webinar.

The purpose of this webinar is to give participants an understanding of all aspects of HIPAA compliance. To make this understanding less complicated and likeable, Jay will break down the complexities of HIPAA compliance requirements in a simple and easy to understand method. The participants of this webinar will get clear knowledge of all the requirements for a comprehensive HIPAA compliance program and what steps they need to take in order to mitigate risk.

Jay will cover the following areas at this discussion:

• Why was HIPAA created?
• Who Must Comply with HIPAA Requirements?
• What are the HIPAA Security and Privacy Rules?
• What is a HIPAA Risk Management Plan?
• What is meant by “Required” and “Addressable” Implementation Specifications?
• What are Administrative, Technical, and Physical Safeguards Requirements?
• What is a HIPAA Risk Assessment?
• What are HIPAA training requirements?
• What is a HIPAA data breach and what happens if it occurs?
• What are the penalties and fines for non-compliance and how to avoid them?
• Creating a Culture of Compliance
• Questions

This course will be of immense value to personnel involved in one or another way with HIPAA implementation. these include Compliance Officers, HIPAA Privacy Officers, HIPAA Security Officers, Medical/Dental Office Managers, Practice Managers, Information Systems Managers, Chief Information Officers, General Counsel/Lawyers, Practice Management Consultants, Any Business Associates that accesses Protected Health Information, and IT Companies that support Medical/Dental practices or other healthcare organizations.

Fill the form to get more updates on Hipaa requirements

Ways of putting a HIPAA organizational Compliance Program in place

For an organization to be compliant with HIPAA; it has to not only ensure that it provides the appropriate patient rights and controls on its uses and disclosures of Protected Health Information; it has to also have the proper policies and procedures in place. Any organization that is the subject of a compliance review or is being audited has to demonstrate to the government that it has all the documentation necessary for safeguarding patient Protected Health Information, apart from also having the ability to show how it is addressing all of the required security safeguards.

 

Increase in HIPAA enforcement activities

 

A full understanding of the requirements of a compliance program has become all the more important in the background of an increase in HIPAA enforcement and with Phase 2 audits getting underway.

 

If an organization has to put all the required documentation aspects together in place; it needs to have a very good understanding of the ways of putting in place a HIPAA compliance program with which to ensure that the current program is adequate and can withstand government scrutiny. How does an organization do all these?

 

Jay will equip the participants with a thorough understanding of all the requirements needed for a comprehensive HIPAA compliance program and explain what steps need to be taken to mitigate risk. At this learning session, he will include practical exercises to assist know how to develop, review, and amend HIPAA policy and procedure. He will provide a Covered Entity or Business Associate a clear roadmap for what needs to be in place when it comes to all of the HIPAA regulations.

 

More information go through this link   :  http://bit.ly/25xX4ip