Pupkin wrote:
> In article <1157488036.135778.156830 DeleteThis @i3g2000cwc.googlegroups.com>,
> chasleigh DeleteThis @gmail.com says...
>
>>Well that narrows down. Something that's not like anything else on the
>>internet.
>>
>>Unique Idea! Best not spell it out here.
>>
>>
>
>
> A bit brusque, eh? To be fair, I didn't ask if anyone knew of a Google
> directory page with links to patient-oriented web sites, but rather if
> any one in here knew of a software vendor with online products aimed at
> health care officials. Usually when someone posts a list of Google links
> it's a smart-ass response to the effect of DIY. I've Googled. Now.
>
> I have a prospective client in the healthcare industry who needs basic
> brochure web site, but he also would like to plug in a couple of
> services for his patients. I'd like to give him a quote that doesn't
> involve me researching and implementing the maze of HIPAA security
> requirements -- doing which would likely triple (or more) the overall
> project cost, killing the whole venture and wasting my time.
>
> I'm guessing there are useful third-party services available for some
> kind of monthly fee which would be just what he needs.
>
> Thanks if anyone can point me in the right direction (not Google).
Hmmm, the problem with third party services is even getting a third
party involved who would have access to the data may be enough to make
it non-HIPAA compliant.
You might find a prepackaged product out there, but it all depends on
exactly what they want to do. But if he's not collecting any personal
information on the site, he doesn't have to worry about HIPAA. And if
he is, he has a LOT of worries. He'll probably have to have the server
under lock and key in his office, for instance - hosting it on someone
else's system could make personal information available to the hosting
company - which would be a violation. Even if the data are encrypted,
the decryption key is going to be somewhere on the server (so the
website can server up the pages to the appropriate user).
If you're not familiar with the HIPAA requirements, you might want to
involve someone who is. But personally I would be very leery of putting
anything requiring HIPAA compliance on the web. The chances of being
hacked are just too great. And the penalties too severe.
--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex DeleteThis @attglobal.net
==================
>> Stay informed about: HIPAA-compliant web services? 
FAQ
Profile
Private Messages
Log in
