1 / 58

Information Security Awareness Training: Good Computing Practices for Confidential Electronic Information

2. This presentation focuses on two types of confidential electronic information:. ePHI = Electronic Protected Health InformationMedical record number, account number or SSNPatient demographic data, e.g., address, date of birth, date of death, sex, e-mail / web addressDates of service, e.g., date

lane
Download Presentation

Information Security Awareness Training: Good Computing Practices for Confidential Electronic Information

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

    1. 1 Information Security Awareness Training: “Good Computing Practices” for Confidential Electronic Information Information Security Training for all Workforce Members who use computers. UCSD Health Sciences Privacy / Security Office Issued: 3/15/2005 Updated: 4/22/2005

    2. 2 This presentation focuses on two types of confidential electronic information: ePHI = Electronic Protected Health Information Medical record number, account number or SSN Patient demographic data, e.g., address, date of birth, date of death, sex, e-mail / web address Dates of service, e.g., date of admission, discharge Medical records, reports, test results, appointment dates PII = Personally Identified Information Individual’s name + SSN number + Driver’s License # and financial credit card account numbers

    3. 3 Definition of “ePHI” ePHI or electronic Protected Health Information is patient health information which is computer based, e.g., created, received, stored or maintained, processed and/or transmitted in electronic media. Electronic media includes computers, laptops, disks, memory stick, PDAs, servers, networks, dial-modems, E-Mail, web-sites, etc. Federal Laws: HIPAA Privacy & Security Laws mandate protection and safeguards for access, use and disclosure of PHI and/or ePHI with sanctions for violations.

    4. 4 Definition of “PII” “Personal information” – Unencrypted computerized information that includes an individual’s name in combination with any one or more of the following: Social Security Number, Driver’s license number, or California ID card #, credit / debit in combination with their access / security code or password State Law: SB-1386 California, Privacy of Personal Information to Prevent Identity Theft. SB-1386 requires mandatory notice to the subject of an unauthorized, unencrypted electronic disclosure of “personal information”.

    5. 5 What are the Information Security Standards for Protection of ePHI? “Information Security” means to ensure the confidentiality, integrity, and availability of information through safeguards. “Confidentiality” – that information will not be disclosed to unauthorized individuals or processes [164.304] “Integrity” – the condition of data or information that has not been altered or destroyed in an unauthorized manner. Data from one system is consistently and accurately transferred to other systems. “Availability” – the property that data or information is accessible and useable upon demand by an authorized person.

More Related