Cyber Liability Insurance

(HIPAA) Health Insurance Portability and Accountability Act of 1996
(HITECH) Health Information Technology for Economic and Clinical Health

The new HIPAA HITECH rule enacted by the US Department of Health and Human Services in January 2013, greatly enhances a patient’s privacy rights and strengthens the ability to enforce the HIPAA privacy and security protections, regardless if the information is being held by a health plan, a healthcare provider or one of their business associates. Penalties have increased for noncompliance based on the level of negligence with a maximum penalty of $1.5 million per violation.

All practices must be compliant with HIPAA/HITECH laws, which include:

• Policies and Procedures
• Workforce Training
• Risk Assessment and Risk Mitigation
• Incident Response Plan & Response Team
• HIPAA/HITECH Compliance Audits
• Business Associate Agreements
• Obligations when Breach Occurs
• Federal/State Law Breach Notification Requirements
• Payment Card Industry (PCI) Data Security Standards

Cyber Liability / Data Breach Protection Policy Highlights:

• Privacy Liability
• Privacy Notification Expense
• Regulatory Liability – HIPAA/HITECH Fines & Penalties
• Network Security Liability
• Media/Website Liability
• Public Relations & Crisis Management Expense
• Credit Monitoring Expense
• Legal & Forensic Expense
• Theft Resolution Services
• Risk Management Services

On-Line Compliance Materials

Federal and state compliance materials regarding data security, data breaches, and data privacy including:

• Quick Tips on Many Subjects
• Summaries of Federal/State Laws
• Links to Statues & Regulations
• Sample Policies & Procedures
• Continuing Updates & Electronic Notification of Significant Changes to the On-line Materials

Monthly Newsletters & “Instant Alerts”

• “Instant alerts” sent by email for events that require immediate attention.
• Newsletters sent by email, learn about changes in federal and state laws regarding data security,
  data breach, and data privacy issues.

Expert Support On-Line

Expert support from consultants/attorneys on data security issues, including:

• Health Care & HIPAA Compliance Issues
• Data Breach Prevention Issues
• Data Security Best Practices
• Computer Forensic Issues

Step-by-Step Procedures to Lower Risk

Procedures and on-line forms help you:

• Understand the scope of “Personal Information” (PI)
• Determine where PI is stored
• Collect and/or Retain the minimum amount of PI as required for business needs
• Properly destroy PI that is no Longer Needed
• Implement an Incident Response Plan

Training Modules

• Online Training Programs
• Employee Training Bulletins & Posters
• Webinars for Privacy Compliance and IT Staff
• Audio and PodCast training for Managers and/or Employees

Handling Data Breaches

Guidance provided to:

• Help prevent Data Security Incidents
• Respond to a Data Breach