ICN Presentation

HIPAA Gap HIPAA Gap Analysis TrainingAnalysis Training

Presented by the

State of Iowa Enterprise HIPAA Compliance State of Iowa Enterprise HIPAA Compliance Project Office Project Office

and

CurrentOperational Conditions

HIPAARequirements

(Privacy,Transactions &

Code Sets)

GAPGAP

Activities that addressthe issues to cover this gap define the project

plan and activities.

The Use of a Gap AnalysisThe Use of a Gap Analysis

1. Getting Started

2. Defining Expectations

3. Defining the Work

4. Estimating the Project

5. Finalizing the Plan

6. Building the Project Team

7. Tracking Project Progress

8. Controlling the Project

9. Reporting and Communications

10. Closing Out the Project

Effective Project Management

1. Getting Started Making sure you are doing the right project. Ensuring you have a mandate. Verifying priority and ensuring consensus.

2. Defining Expectations Identifying project stakeholders. Defining project requirements. Gaining agreement on project outcomes.

3. Defining the Work Establishing project scope. Defining project deliverables. Identifying project activities. Establishing order and logic.

Effective Project Management(continued)

Effective Project Management4. Estimating the Project

A process for estimation. Estimating effort. Scheduling and resource leveling. Cost estimation. Estimating for change and contingency.

5. Finalizing the Plan Developing the Project Plan. Ensuring approval. Adopting Project Management schedules.

6. Building the Project Team Determining project staffing. Building effective project teams. Managing for continued team performance.

(continued)

Effective Project Management

7. Tracking Project Progress Tracking effort, schedule, and cost. Using performance measures.

8. Controlling the Project Managing project issues. Managing and controlling project scope. Managing for project risk.

9. Reporting and Communications Maintaining organizational awareness. Communicating status and progress.

10. Closing Out the Project Completing the project. Evaluating project success. Conducting post implementation reviews and learning for the future.

(continued)

HIPAA Deadlines for HIPAA Covered Entities

Administrative Simplification – Standardized Transactions and Code Sets for Electronically Filed Medical Claims

If you have not filed for a deadline extension with HHS, you were required to start using the standardized transactions and code sets effective October 15, 2002.

If you have filed for an extension of the deadline with HHS, you must begin testing with the new standardized transactions and code sets by April 14, 2003 and must begin using them for all electronic transactions no later than October 15, 2003.

Privacy Requirements April 14, 2003

Security Requirements Not finalized – no deadline yet

HIPAA Deadlines for Business Associates

HIPAA Covered Entities must have business associate agreements in place

April 14, 2004

http:// www.iowasnip.orghttp:// www.iowasnip.org

Iowa SNIP (Strategic National Iowa SNIP (Strategic National Implementation Process) Affiliate WebsiteImplementation Process) Affiliate Website

http://snip.wedi.org/http://snip.wedi.org/

National SNIP (Strategic National National SNIP (Strategic National Implementation Process) WebsiteImplementation Process) Website

State of IowaState of IowaEnterprise HIPAA Compliance Enterprise HIPAA Compliance

Project Office WebsiteProject Office Website

http://www.state.ia.us/government/hipaa/http://www.state.ia.us/government/hipaa/

Department of Health and Human ServicesDepartment of Health and Human Services

Health Insurance Portability and Health Insurance Portability and Accountability Act of 1996 (HIPAA) WebsiteAccountability Act of 1996 (HIPAA) Website

http://www.cms.hhs.gov/hipaa/http://www.cms.hhs.gov/hipaa/

Department of Health and Human ServicesDepartment of Health and Human Services

Office for Civil Rights – HIPAA WebsiteOffice for Civil Rights – HIPAA Website

http://www.hhs.gov/ocr/hipaa/http://www.hhs.gov/ocr/hipaa/

State of IowaState of IowaEnterprise HIPAA Compliance Enterprise HIPAA Compliance

Project Office ContactProject Office Contact

Tom R. ShepherdTom R. ShepherdState of IowaState of IowaEnterprise HIPAA Compliance Project AdministratorEnterprise HIPAA Compliance Project Administrator

tom.shepherd@itd.state.ia.us

(515) 725-0294(515) 725-0294