Security Compliance for Rampton Hospital in the Hospital Industry

This report discusses the security compliance measures that Rampton Hospital in the hospital industry must implement, including HIPAA, HL7 International HER Functional Model, and Personal Health Information Protection Act, 2004.

Running head: SECURITY COMPLIANCE
SECURITY COMPLIANCE
Name of the Student
Name of the University
Author note

1SECURITY COMPLIANCE
Selected Organization
The organization that is selected is the hospital industry. The hospital that is chosen for
completion of this report is Rampton Hospital. This hospital is located in Retford, United
Kingdom.
Industry Specific Compliance
The industry specific compliance that must be used by the Rampton Hospital is HIPAA.
The reason of implementing the HIPAA in this organization is that the projection of the
terminology that HIPAA deals with the Health Insurance Portability and Accountability Act.
The Health Insurance Portability and Accountability has been setting a proper standard
for the sensitive data protection. According to the HIPAA, Rampton must be having a physical,
network and the process security measure in place in order to say abide by the HIPAA
compliance.
The laws that are needed to be focused on are as follows: -
 Request for Comments on December 28, 2000, Final HIPAA Privacy Rule
 Correction of Effective and Compliance Dates of the Final HIPAA Privacy Rule.
Standards, Frameworks and Policies
The requisite set of standards that is required for better management of the Electronic
Health record includes implementation of the HL7 International HER Functional Model (Ben-
Assuli 2015). This will help in outlining the processing of the important features that will be
related to the processing of the functional profiles. Standard description of functional healthcare

2SECURITY COMPLIANCE
settings will be provided. HL7 have been developing as a unit for bettering the statistical
reporting.
The framework that will be required for commencing of the project incurs the fact that 15
point framework will be required. The framework is designed with the help of the 3 dimensions.
The dimensions are namely user centered design process, summative testing methodology and
summative testing methodology.
The policies that are to be implemented for the functioning of the EHR includes Personal
Health Information Protection Act, 2004. Under this section the Rampton hospitals will have to
send their details regarding the policy maintenance. The policies are modified with the help of
the overridden methodology.
Critical data infrastructure
The critical data infrastructure are as follows: -
Network: Nationwide Health Information Network is mainly used for the processing of
the HER system in the Rampton Hospital. Implementation of the Health Information exchange
can also be made.
Telecom: Telecom system finds its usage in the transaction of data in between the
stakeholder’s of the Rampton organization. This is one of the main reason that functioning of the
EHR are prosecuted. This is the main reason that the commenced of the project will get
performed in a better manner (Spooner 2016).
Applications: The main application is to provide proper communication in between the
doctors and the patients.

3SECURITY COMPLIANCE
Client data categories: Client data categorizing helps in better compartmentalizing of the
data.
Human Resources
Human resources for technical, management and the legal operation are technical
managers, IT manager, and lawyers.
Requisite Law Enforcement
The law enforcement entity that is processed includes local state and federal areas of
compliance for mitigating the processing of security breaches. With the help of the law
enforcement entity better prosecution of the terminologies can be performed.

4SECURITY COMPLIANCE
References
Ben-Assuli, O. (2015). Electronic health records, adoption, quality of care, legal and privacy
issues and their implementation in emergency departments. Health policy, 119(3), 287-
297.
Spooner, S. A. (2016). Protecting Privacy in the Child Health EHR. In Pediatric Biomedical
Informatics (pp. 27-36). Springer, Singapore.