Patient attraction is big business, and the websites, social media, surveys, email and texting tools that vendors sell are all subject to HIPAA rules that are often overlooked. A single look at a provider's website can reveal a violation. This 60-minute webinar on HIPAA social media violations explains how to communicate with patients compliantly.
Many violations happen through unencrypted email and text. Even a simple appointment reminder, birthday greeting, checkup reminder or balance notice is PHI.
You'll learn the provider's duty to warn patients about unencrypted email, the consent safe harbor, what to do when a patient refuses, how business associates can communicate on a provider's behalf, and the policies and documentation that show compliance.
WHY SHOULD YOU ATTEND?
Providers and business associates want to use patient engagement tools fully while avoiding government penalties and patient lawsuits. If a patient refuses unencrypted email after being warned, that restriction must be followed strictly.
The session suits HIPAA, compliance, privacy and security officers, practice, office, contracts and health information managers, C-suite and CIOs, IS managers, chief clinical officers, healthcare counsel and HR.
AREA COVERED
- What information makes a message subject to HIPAA, and what PHI is
- Patient engagement tips that protect privacy and PHI while building the relationship
- Social media: reviews, testimonials and likes
- Marketing and patient communication: phone calls, emails and text messages
- Websites: what to post and not to post
- Portable devices and electronic communications networks
- The safe harbor for obtaining patient consent to unencrypted email and text
- What to do if a patient won't accept PHI by unencrypted email or text
- Requirements for business associates communicating with patients, and protecting them in the business associate agreement
- How providers and business associates can work together to avoid violations
- Documentation that proves compliance
- Policies and procedures for your HIPAA compliance program
LEARNING OBJECTIVES
- Identify what information in a message counts as PHI
- Use social media, reviews and websites without violating HIPAA
- Obtain patient consent to send PHI by unencrypted email and text
- Respond correctly when a patient refuses unencrypted communication
- Set requirements for business associates that communicate with patients
- Document compliance with policies and procedures
WHO WILL BENEFIT?
- HIPAA Compliance Official (HIPAA Officer)
- Compliance Director
- Practice Manager
- Privacy Officer
- Security Officer
- CEO,CFO,COO
- Chief Information Officer
- Information Systems Manager
- Health Information Manager
- Healthcare Counsel/lawyer
- Office Manager
- Contracts Manager
- Chief Clinical Officer
- Human Resources
Providers and business associates want to use patient engagement tools fully while avoiding government penalties and patient lawsuits. If a patient refuses unencrypted email after being warned, that restriction must be followed strictly.
The session suits HIPAA, compliance, privacy and security officers, practice, office, contracts and health information managers, C-suite and CIOs, IS managers, chief clinical officers, healthcare counsel and HR.
- What information makes a message subject to HIPAA, and what PHI is
- Patient engagement tips that protect privacy and PHI while building the relationship
- Social media: reviews, testimonials and likes
- Marketing and patient communication: phone calls, emails and text messages
- Websites: what to post and not to post
- Portable devices and electronic communications networks
- The safe harbor for obtaining patient consent to unencrypted email and text
- What to do if a patient won't accept PHI by unencrypted email or text
- Requirements for business associates communicating with patients, and protecting them in the business associate agreement
- How providers and business associates can work together to avoid violations
- Documentation that proves compliance
- Policies and procedures for your HIPAA compliance program
- Identify what information in a message counts as PHI
- Use social media, reviews and websites without violating HIPAA
- Obtain patient consent to send PHI by unencrypted email and text
- Respond correctly when a patient refuses unencrypted communication
- Set requirements for business associates that communicate with patients
- Document compliance with policies and procedures
- HIPAA Compliance Official (HIPAA Officer)
- Compliance Director
- Practice Manager
- Privacy Officer
- Security Officer
- CEO,CFO,COO
- Chief Information Officer
- Information Systems Manager
- Health Information Manager
- Healthcare Counsel/lawyer
- Office Manager
- Contracts Manager
- Chief Clinical Officer
- Human Resources
Speaker Profile
Paul R Hales
"Paul Hales received his Juris Doctor degree from Columbia University Law School and is licensed to practice law before the Supreme Court of the United States. He is an expert on HIPAA Privacy, Security, Breach Notification and Enforcement Rules with a national HIPAA consulting practice based in St. Louis. Paul is the author of all content in The HIPAA E-Tool, an Internet-based, Software as a Service product for health care providers and business associates."
Upcoming Webinars
New Form I-9: Documents and Policies that Ensure ICE I-9 Co…
Claude AI For CPAs & Finance Professionals: Best Practices …
Secrets Of Psychology - Why People Do The Things They Do
2-Hour Virtual Seminar on How to Conduct an Internal Harass…
Project Management For Administrative Professionals
Elevate Your Workplace Wellness: 10 Critical Wellness Facto…
Onboarding is NOT Orientation - How to Improve the New Empl…
Managing Complex Projects - Project Management
Utilizing HR Metrics to Illustrate & Improve Human Resource…
Negotiating Skills For Professional Results - Winning Strat…
NEW Nacha Rule - Third-Party Sender (TPS) Roles and Respons…
FDA Technology Modernization Action Plan (TMAP) and Impact …
Paying and Receiving Payments for Referrals: You Can Go to …
Validation Statistics for Non-Statisticians
Human Factors Usability Studies Following ISO 62366 and FDA…
Construction Lending And Real Credit Administration: Evalua…
Excel Power Skills: Master Functions, Formulas, and Macros …
Thriving in a Hybrid Workplace: Keys to Leadership and Team…
Batch Record Review and Product Release
Discover how Emotional Intelligence turns AI from a technic…
Female to Female Hostility @Workplace: All you Need to Know
Copilot and HR: An Introduction for HR Professionals
ChatGPT for HR - Build HR Policy Framework and Strategy
Excel Spreadsheets; Develop and Validate for 21 CFR Part 11…
The Perfect Storm Coming to Healthcare: Value Based Care Me…
Language is Code - Intro to AI - Generative AI - ChatGPT an…
Major cGMP Issues: FDA Concerns in 2026
I-9 Audits: Strengthening Your Immigration Compliance Strat…
Pivot tables beginner to advanced + 20 advanced Pivot table…
Emotional Intelligence: Mastering the Emotions of Great Lea…