Events Calendar

Mon
Tue
Wed
Thu
Fri
Sat
Sun
M
T
W
T
F
S
S
28
29
30
31
1
2
3
5
6
7
8
9
10
13
14
15
16
17
18
12:00 AM - Epic UGM 2025
19
20
21
22
23
24
25
26
27
28
29
30
31
The 2025 DirectTrust Annual Conference
2025-08-04 - 2025-08-07    
12:00 am
Three of the most interesting healthcare topics are going to be featured at the DirectTrust Annual conference this year: Interoperability, Identity, and Cybersecurity. These are [...]
ALS Nexus Event Recap and Overview
2025-08-11 - 2025-08-14    
12:00 am
International Conference on Wearable Medical Devices and Sensors
2025-08-12    
12:00 am
Conference Details: International Conference on Wearable Medical Devices and Sensors , on 12th Aug 2025 at New York, New York, USA . The key intention [...]
Epic UGM 2025
2025-08-18 - 2025-08-21    
12:00 am
The largest gathering of Epic Users at the Epic user conference in Verona. Generally highlighted by Epic’s keynote where she often makes big announcements about [...]
Events on 2025-08-04
Events on 2025-08-11
Events on 2025-08-18
Epic UGM 2025
18 Aug 25
Verona

Events

Articles

Hacking HIPAA – Patient Focused Common Notice of Privacy Practices

hacking

How can you not be interested in an article that talks about hacking? Of course, in this case I’m talking about hacking in a much more general since. Most people think of hacking as some nefarious person compromising a system they shouldn’t be accessing. The broader use of the term hack is to create something that fixes a problem. You “hack” something together to make it work.

This is what David Harlow, Ian Eslick, and Fred Trotter had in mind when they got together to hack HIPAA. They wanted to create a HIPAA Notice of Privacy Practices (NPP) that would provide meaningful privacy choices for patients while still enabling the use of the latest technology. Far too often HIPAA as seen as an excuse for why doctors don’t use technology. However, if the NPP is set up correctly, it can enhance patient privacy while allowing use of the latest technologies in your practice.

The Hacking HIPAA team decided to leverage the power of crowdfunding to see if they could collaboratively develop a patient focused Notice of Privacy Practices. I really love the idea of a Common Notice of Privacy Practices. If you like this idea, you can help fund the Hacking HIPAA project on MedStartr.

For those not familiar with crowdfunding, imagine your healthcare organization getting $10,000 worth of legal work from one of the top healthcare lawyers for only $1000. Looked at another way, you get an updated Notice of Privacy Practices with all the latest HIPAA omnibus rules incorporated for only $1000. Call your lawyer and see if they’d be willing to provide an NPP for that price. Plus, your lawyer probably will just provide you some cookie cutter NPP they find as opposed to a well thought out NPP.

This is such a great idea. I hope that a large number of healthcare organizations get behind the project. I’d also love to see some of the HIPAA disclosure companies and EHR companies support the project as well. The NPP will have a creative commons license so those companies could help fund the project, provide feedback in the creation of the NPP and then distribute the NPP to all of their customers. What better way to build the relationship with your customers than to provide them a well thought out NPP?

If you want a little more information on how the Hacking HIPAA project came together, here’s a video of Fred Trotter talking about it. Also, be sure to read the details on the Hacking HIPAA MedStartr page.

http://vimeo.com/68920317

(Source)