HIPAA: the critical role of identity and access management

Whether providing patients with online access to their medical records or enabling physicians to place paperless orders, there are several benefits to online electronic systems that ultimately can lead to improved patient care and outcomes. However, as healthcare providers move closer to a paperless environment and Internet-based applications, they must understand the increased risks to privacy and security that are incurred by using electronic systems. Organizations must give careful consideration to ensure that applications, authentication, authorization and provision practices are addressed to ensure HIPAA regulations are met and, more importantly, that patient care is not compromised.