Brandon Ho, CIPP

1
Brandon Ho, CIPP

• HIPAA Compliance Specialist Pacific Regional
  Medical Command, Tripler Army Medical Center
• Aloha from the 50th State

2
Trained to Boredom

• Strategies for making HIPAA training relevant and
  memorable in ensuring compliance

3
Do you have a hard time with HIPAA training
compliance? Why?
4
Wheres the HIPAA Compliance Specialist?
5
Wheres the HIPAA Compliance Specialist?
6
Wheres the HIPAA Compliance Specialist?
7
Wheres the HIPAA Compliance Specialist?
8
This is who we would like to be
9
This is who we would like to be with
10
Reality

• HIPAA is just not glamorous!
• Misunderstood
• Misspelled
• But..
• Still very important!

11
So How Do We Train?

• Are our training techniques doing anything to
  alleviate the situation?

12
On-Line Training
13
Videotaped training
14
Classroom sessions AKA Death by PowerPoint
15
Problems?

• Hoping that automated system will allow us to
  have less work?
• Lessons from our school days
• Who were your best teachers?
• What lessons do you remember most?
• Why?

16
Be a Teacher, Marketer, Salesperson

• Not just a compliance specialist

17
Winning the Hearts and Minds

• Attempting to change the culture of Health
  Information Management

18
Solution? A Culture of Compliance

• ENGAGEMENT
• and
• RELEVANCE

19
Does your facility know who to go to for answers?

• Very often HIPAA is an added duty.
• Even then, does everyone know who to go to?
• Do your employees feel that they need to make
  decisions on their own?

20
Tips for a HIPAA Compliance Specialist

• It should be about more than just training
  newcomers and annual requirements

21
Make your self available 24/7
Technology Tools allow us to stay engaged We
work in a 24/7 business
22
Some other tools

• Newsletters
• e-Mail compliance tips

What would it take to ensure that your workforce
knows that you are engaged in the process with
them and not just acting as an enforcer of a
bureaucracy?
23
The HIPAA HIPPO is Watching!
24
Relevance

• I never really took HIPAA seriously until my own
  information was made public by my co-workers.

25
How does this affect me? Or By Hook or by
Crook

• On July 16, 2008, the U.S. Department of Health
  Human Services (HHS) entered into a Resolution
  Agreement with fines of 100,000 with
  Seattle-based Providence Health Services
  (Providence) to settle potential violations of
  the Health Insurance Portability and
  Accountability Act of 1996 (HIPAA) Privacy and
  Security Rules.

• HIPAA Tips
• Weekly (or even daily e-mail tips to users)
• Importance of empathy!
• Of course, making them aware of the penalties
  doesnt hurt!

26
Using Pop Culture

• Remember the UCLA Med Center Case?

27
What Does a Culture of Compliance Look Like?
28
HIPAA Training and Compliance should not be seen
as a burden
29
Training should not be stressful
30
Training needs to meet the needs of the
individuals being trained
31
It needs to be defined for YOUR facility
32
We need to do the right thing at all times and
not just in fear of punishments.

• This mentality can be created if we make it so.

33
Your enthusiasm will set the stage for our
Culture of Compliance.
34
ALOHA!!Mahalo!! for your Time and Attention!

• Any Questions?