40 likes | 170 Views
DHHS HIPAA Office FY03 Focus. September 2002. DHHS HIPAA Office Focus. The DHHS HIPAA Office will focus on the following in FY03: All Privacy efforts to include: Developing DHHS Privacy policies Developing procedure templates and remediation guidance
E N D
DHHS HIPAA Office FY03 Focus September 2002
DHHS HIPAA Office Focus The DHHS HIPAA Office will focus on the following in FY03: • All Privacy efforts to include: • Developing DHHS Privacy policies • Developing procedure templates and remediation guidance • Identifying Business Associates and providing contract language • Priority 1 and 2 Transactions and Code Sets Projects • Provision of an acting DHHS Privacy Official • Consultative EDI support
Priority Category Description Priority 1 Projects that are specified in the regulations as required for compliance. These projects are Transactions and Code Sets projects or Privacy projects. They must be initiated or completed within FY 2003. (For example: MMIS electronic transactions, development of Privacy policies) Priority 2 System projects that send data to Priority 1 systems and are required for business operations [such as the Laboratory Information Management System (LIMS) that feeds HSIS for State Lab billing]. These systems enable revenue collection and their projects should be initiated or completed within FY 2003. Priority 3 Systems that receive data from Priority 1 systems (such as case management data for locals, institution databases used for business/clinical needs, etc.). Start dates for Priority 3 Projects are not yet confirmed and funding may not be needed for these projects until January 2003. By December 2002, the HIPAA Office will forecast these costs and business operations impact with higher accuracy. FY03 Project Priorities • Privacy Compliance • Transactions and Code Sets (TCS) Compliance
Changes as of September 6, 2002 • Eliminated the security assessment provisions within divisions • Excluded the Office of Education Services and the Developmental Evaluation Centers (DECs) from Privacy requirements • Adjusted/reduced project estimates based on updated information from divisions • Significantly reduced HIPAA Office staff • Significantly reduced DIRM Applications Development staff • Eliminated budgetary requirements for State employees included in Continuation Budget (new hires for decentralized Privacy Officials eliminated) • Removed line item costs such astravel and facilities - e.g., leasing, utilities, etc. (assuming that divisions will cover any costs incurred in this area) • Removed line item costs for decentralized software/hardware associated with workflow, document management, etc. • Eliminated Transaction and Code Sets certification testing (except MMIS) • Eliminated additional staff for end-user system training • No Priority 3 project approximations are included until there is an approved budget • Eliminated a centralized compliance verification program