City-sponsored health plans may be impacted by the HIPAA privacy and security requirements, including the city's health flexible spending account (medical reimbursement account), and the city's health reimbursement arrangement (HRA) or VEBA. If your city's health plan is covered, HIPAA mandates that the city establish and implement polices and procedures with respect to protected health information—whether that information is oral, written, or in electronic form.
The League has negotiated with Hitesman & Associates a discounted fee for individualized city assistance with HIPAA compliance activities. Following is a summary of the services available:
- Assistance developing HIPAA policies and procedures (Cost: $500 per city)
Assistance will address the unique needs of that individual city. (The city would need to identify a contact person at the city for purposes of getting information, scheduling, etc.)
- Half-day on-site training session (Cost: $500 for each half-day session, plus mileage if over 30 miles)
Hitesman & Associates offers two on-site training opportunities related to HIPAA compliance activities. Each training is a half-day session. Attendance is limited to six city employees and is mainly geared toward city IS and HR/benefits staff.
- HIPAA Security Training
Training will address the role of the assessment, things to consider when evaluating the security standards, and working through the policies and procedures.
- HIPAA Privacy and Security Training
Part of this half-day session will be spent on covering/reviewing the Privacy Rules, with the remaining time devoted to HIPAA Security.
Return to HIPAA page