The human element
Jeremy S. Craig · 2009
The Health Information Portability and Accountability Act of 1996 (HIPAA) has created many regulations that health care providers must follow to assure health information security, with critical obligations toward pieces of the human element --- training, awareness, and human resources policy. The HIPAA Security Rule provides a regulatory framework, and the National Institute of Standards and Technology provides a model for the development of policy to meet obligations of the Security Rule. Health care organizations are advised to follow the NIST model to meet training, awareness, and human resources obligations, as well as the moral obligation to keep health information private.