Title: Describe concepts of privacy and security as applied to the EHR.
Course: Health Informatics (14157-I) > Section: Configuring Electronic Health Records (EHRs)

Description should include discussion of

- user passwords
- physical security of systems (e.g., encryption)
- risk management
- authentication and authorization
- regulatory frameworks
  - Office of the General Counsel (OGC)
  - Office for Civil Rights (OCR)
  - Office of the National Coordinator for Health Information Technology (ONC)

- biometrics.

Teacher Resource: Security Risk Assessment Videos (https://www.healthit.gov/topic/privacy-security-and-hipaa/security-risk-assessment-videos), HealthIT.gov

Process/Skill Questions:

- What are some of the privacy concerns for the EHR?
- What are some of the mechanisms used to determine identification of individuals?
- Which regulatory bodies (federal and/or state) are responsible for the privacy and security of the EHR?
- What is biometrics, and how is it used?