March 1, 2013 Heart-Centered Privacy and Security: Evaluating Our Tech for Client and Clinician Safety PART 2

Educational Objectives

• Determine what the clinician needs to do to achieve compliance with HIPAA Security and HITECH mandates
• Describe security standards like encryption and when we need them in clinical practice – legally, ethically and practically.
• Describe an Internet transmission and where risks to confidentiality lie in it.
• Assess popular communications technologies for ethical, clinical and practical appropriateness for use with clients.
• Make an Interim Security and Privacy Plan that takes the clinician’s time, energy and financial resources into account
• Determine the clinician’s needs around how best to assist their particular clients in protecting their own privacy in therapy
• Create a Communications Policy that reflects sound security and privacy procedures and helps clients be involved in the security and privacy process
• Incorporate client behaviors and beliefs around security/privacy into assessment and treatment.

Ethics/Legal Documents Cited

• ACA Code of Ethics (2005)
• APA Ethical Principles of Psychologists and Code of Conduct (2002)
• NASW Code of Ethics (2008)
• HIPAA Administrative Simplification (2006)
• NASW and ASWB Standards for Technology and Social Work Practice (2005)
• NBCC Policy Regarding The Provision of Distance Professional Services (2012)
• APA Guidelines For the Practice of Telepsychology, July 2012 DRAFT (Released for public comment.)