Health information and HIPAA policy

Why it's needed:

Many nations have laws or regulations regarding the treatment of patients’ health information. In the U.S., health information is governed HIPAA. Other countries have similar laws.
Any organization dealing with an individual’s personal health information—whether you’re a healthcare provider, an insurer or a provider of professional services such as billing—needs to take its policies in this area very seriously.

Key points:

Extend the organization’s existing HIPAA policy to reflect requirements for digital operations practices.

Policy background, how is done: Immediate steps, Documenting and Implementing the policy:
The Power of Digital Policy book, page:

236

Which Digital Policies?