1. 1 Information Security for HIPAA Second Meeting for Researchers Michael Caputo February 18, 2003

2. 2 Database Survey Need to know about:  Databases  Repositories  Registries  Tissue Banks What specifically?  What is it?  Where is it?  What format? (electronic, physical, or both)  Who is the owner of this database?  Who has access?

3. 3 Database Survey (Continued) Survey will be completed online  Access via the HIPAA Research Website  Late March  One form for each database, repository, etc. Next steps  Determine best approach to HIPAA security  Include appropriate training and policy information

4. 4 Physical Security Restricted Access  Locked file cabinets  Locked Doors  Back-ups kept in secure areas  Tapes, disks, reports, etc.  Long term storage solution Common Sense  Do not leave files in common areas  Desk, conference room, lab, or in the mail  Shred information no longer needed  Don’t toss it in the trash  Passwords should be kept secret

5. 5 HIPAA Research Website http://med.uvm.ed/hipaa