HIPAA: HIPAA Compliance

In order for an organization to comply with HIPAA it must rely on a Public Key Infrastructure (PKI) such as iStatus: Such a solution satisfies HIPAA using a combination of technologies that incorporate the management of healthcare user identities in a secure, on-line environment that provides the necessary infrastructure for confidentiality, integrity, authentication, and non-repudiation.

iStatus' Public Key Infrastructure based on software and encryption technology, has been created to secure medical transactions on the Internet. Its foundation is public key cryptography, an encryption method that uses a two-part key (code) that consists of a public and private component. The message is sent encrypted with the public key and is then read by the recipient with his or her own private key. This technology is quickly becoming the best way to ensure safe business-to-business communication using tools such as certificate authorities and digital certificates to create an enterprise-wide security network.

Digital certificates, also known as digital signatures are a legally binding electronic confirmation for all types of transactions as specified in the Law that was signed June 30, 2000 by President Clinton as Public Law No: 106-229. It provides irrefutable proof that you are who you say you are, and that you can legally sign off on a business transaction. Non-repudiation is a key element of extranet-based business and cannot be provided by a username/password pair.

Some of the healthcare related Information and Applications that will be affected include any type of patient identifiable information, such as health claims or equivalent forms, health claim attachments, enrollment and dis-enrollment in a health plans, eligibility for a health plan, care payment and remittance advice, first report of injury, health claim status, referral certification and authorization.

Some of the organizations that will be affected include the Department of Health and Human Services HCFA (Health Care Financing Administration), State Medicaid agencies, Health plans and Insurers, Healthcare providers; hospitals, clinics, physician practices, Healthcare clearinghouses, and Healthcare web site designers and hosts.

Contact Us in regards to HIPAA Compliance