New Privacy and Security Toolkit, Online Education Program Available for Colorado Physician Practices

Date: August 17th, 2011Category: CORHIO e-NewsletterTopics: EHRs, Meaningful Use

Toolkit to Help Physicians & Office Staff Understand, Comply With HIPAA Privacy and Security Rules

Many physician offices have fallen behind on staff training for HIPAA privacy and data security, putting their practices at legal and financial risk from an unintended violation. This can be especially true for smaller practices or those that have recently adopted an electronic health record (EHR) system.

While EHR systems have built-in security and privacy controls that far exceed paper records, it is important for staff at physician practices to be aware of guidelines to follow, and best practices, for protecting the privacy and security of their patients' health information.

To proactively confront this important issue, The Colorado Regional Extension Center (CO-REC) has developed a free Privacy and Security Toolkit to assist health care providers in private practices understand the key elements of the Health Insurance Portability and Accountability Act (HIPAA) and Privacy & Security Rules as they relate to the implementation of health information technology.

The toolkit consists of four documents, including:

  • Privacy & Security Fact Sheet for Meaningful Use
  • HIPAA Privacy & Security Best Practices for Health Information Technology Use
  • HIT Security Risk Analysis Questionnaire
  • Risk Analysis Action Plan Report Template

To get a free copy of the toolkit, email

Web-based HIPAA & Security Training

In addition to overview information of HIPAA, the toolkit provides a list of organizations identified by CO-REC that provide online education or in-person training for providers at discounted rates. One of those, BridgeFront, a nationally recognized leader in Web-based HIPAA training, has contracted with CORHIO to reduce the price of online HIPAA training to all Colorado providers by more than 60 percent.

[Access the special Colorado BridgeFront online education site here]

"Small practices are often behind in keeping their staff up-to-date on training related to HIPAA, so we're happy to provide assistance to physicians and their office staff in this area," said Robyn Leone, director of CO-REC. "One of the organizations we worked with on the toolkit is PrivaPlan, a company that's well-known for its expertise in health care privacy and security. By collaborating with national experts in HIPAA and data security, we were able to build a toolkit that's customized for Colorado and will help practices achieve compliance with applicable laws and avoid legal missteps."

More Training Options Coming Soon

For practices interested in learning more about privacy and security rules, CO-REC will be hosting a Webinar soon. When the date and time are scheduled, the Webinar will be posted to the 'events' page of the CORHIO website.

Please email with any questions about the free toolkit or discounted online education.