HIPAA regulations, including the security rule, address the use and disclosure of protected health information via the Internet. A key component of the HIPAA regulations has been the development of electronic data interchange.

EDI is the transfer of information, including electronic media health claims, in a standard format between health care entities and others to protect patient confidentiality and eliminate the unauthorized disclosure of protected health information.

EDI allows entities within the health care system to exchange medical, billing, and other information and to process transactions in a manner that is fast and cost-effective. The security rule protects an individual's health information while permitting appropriate access and use of the information by physicians, hospitals, clearinghouses, health plans and others.

If you are transmitting electronic medical records and using EDI, you must protect and safeguard your EMRs. You should consider taking the following steps to ensure protection of health information and EMRs in compliance with the HIPAA regulations and the new security rule:

• Draft and implement HIPAA security policies and procedures for your practice prior to the April effective date.
• Educate and train your staff regarding proper procedures for transmitting EMRs.
• Contact other physicians and entities that receive your EMRs to receive assurance that such recipients agree to be in compliance with the security rule, and with your policies and procedures.
• Conduct frequent reviews of your internal processes regarding the use and disclosure of protected health information, and how it is transmitted by EMRs via the Internet.
• Communicate with your patients regarding how their information will be used and disclosed to other entities during their treatment.
• Confer with an information technology consultant as needed to safeguard accessibility of protected health information by your staff and patients and eliminate any potential security breaches.
• Monitor the legislative landscape and expansion of e-health to protect patient confidentiality and your EMRs."