AAHIM | AI Governance and HIPAA Privacy

This timely presentation delivers detail about complying with HIPAA privacy and security regulations for when Artificial Intelligence (AI) is utilized in healthcare. These concepts of AI, Machine Learning, Large Language Models and other similar terms, can be presented without too much technical jargon or complex details.

Topics for this presentation are focused on HIPAA regulatory considerations with AI (of which there are many) including risks. HIPAA is the primary privacy and security laws focused upon in this presentation, but there are others, especially State law (e.g. California) which will also be examined. It bears remembering that there is a pending Notice of Proposed Rule Making for the new HIPAA Security Rule which would be in and planning and early implementation during the presentation’s timeframe, so this topic would be thoroughly explored as it is moving the entire security rule from just regulatory security to also including cybersecurity, and the changes will be massive.

Learning Objectives:

• The HIPAA privacy and security implications as a part of an overarching AI governance program without hard to understand and relate to AI technology jargon.
• How privacy and security, especially HIPAA, guides AI development and use, using HIPAA rules with some new applications.
• Operational ideas for how to integrate AI into governance and compliance programs already in place.
• Educate on how AI can impact the practice of privacy and security compliance within an organization, be they a provider of care, a payer or a 3rd party vendor. Ideas for Use Cases will be included.
• Non-clinical AI, ones that do the administrative tasks HI is responsible for, both operational and rev cycle will be examined for privacy and security Use Cases.
• Clinical AI Use Cases will be examined for privacy and security implications.
• Inform on how HIPAA requirements for compliance factor into AI use and selection.
• Teach Health Information professionals the very basics of AI governance and how HIPAA applies, which are roles that are natural for the HI profession.
• Introduce the concept of AI Risk Management, which is also needed for both security and privacy, as well as their relation to AI governance.
• Learn details about the requirements for Transparency and Trustworthiness of AI.
• Get a sense of how the Trump Administration is rolling out enforcement which is unknown at the time of this writing but will be updated for the presentation.
• Educating the audience on the fact that civil liability matters too, so regardless of the regulations, compliance, governance and AI controls must be instituted.
• Provide key references and follow-up supplemental reading links for attendees.