The Health Insurance Portability and Accountability Act of 1996 (HIPAA), was the result of efforts by the federal government to ensure healthcare data practices permitted ease for patients to move jobs, insurance and healthcare providers. There are two sections to the Act. HIPAA Title I deals with protecting health insurance coverage for people who lose or change jobs. HIPAA Title II includes an administrative simplification section which deals with the standardization of healthcare-related information systems. In the information technology industries, this section is what most people mean when they refer to HIPAA. HIPAA establishes mandatory regulations that require extensive changes to the way that health providers conduct business.

HIPAA requires the ability to establish and maintain reasonable and appropriate administrative, technical, and physical safeguards to ensure integrity, confidentiality, and availability of the information.

Healthcare organizations are required to individually assess their security and privacy requirements and take suitable measures to implement electronic data protection (both in transit and in storage). As proposed, a HIPAA-compliant information system will need to include a combination of administrative procedures, physical safeguards, and technical measures to protect patient information while it is stored and while it is transmitted across communications networks.

Who Must Comply
Those who must comply with HIPAA include all health plans, health care clearinghouses, or health care providers who transmit health information in electronic form. And Business Associates of these providers who perform certain functions or activities or provide certain services to, a covered entity that involve the use or disclosure of individually identifiable health information.

Genie Backup Manager provides critical data security protection without compromising patient privacy and can help customers achieve HIPAA compliance.
Genie Backup Manager assists Health care providers to be HIPAA compliant in these areas.

HIPAA consists of five parts:
Title1 - Health Insurance Portability - helps workers maintain insurance coverage when they change jobs
Title 2 - Administrative Simplification - standardizes electronic health care-related transactions, and the privacy and security of health information
Title 3 - Medical Savings Accounts & Health Insurance Tax Deductions
Title 4 - Enforcement of Group Health Plan provisions
Title 5 - Revenue Offset Provisions

The one part that does apply to GBM is Title 2 - Administrative Simplification.

Administrative Simplification

HIPAA Administrative Simplification consists of two areas. The first is commonly referred to as the Transactions and Code Sets Rule, although it also covers standardization of identifiers. This Rule requires standardization in all health-related electronic transactions, such as electronic transmission of insurance claims, verification of insurance, statements, explanations of benefits, remittance advice, etc.

GBM is not a health-related transaction, and is therefore not covered under the Transactions and Code Sets Rule.

The second area of Administrative Simplification is made up of two Rules, the Privacy Rule and the Security Rule.

Compliance with HIPAA's Privacy Rule
How GBM helps you comply:

Compliance with HIPAA's Security Rule
How GBM helps you comply:
HIPAA Security Rules require providers to have a written contingency plan for responding to system emergencies. A data backup plan is required as part of the contingency plan, which GBM can provide you at no additional charge. The plan will ensure your data is securely and reliably backed up on a routine basis and that your backed up data will be readily available in the event you have a system failure or other form of data loss.
Using GBM helps reduce your Security "Media Control" risks by eliminating insecure methods of data handling that result from traditional disk or tape backup techniques.
Files are securely transmitted to GBM's data centers using encryption and Secure Socket Layer (SSL) authentication, access controls, auditing mechanisms, and event reporting as required by HIPAA's Security Policy.