FreeLists / webproducers / [webproducers] HIPPA Compliant Website

[Evan Silberman <esilbe1@xxxxxxx>]

Hi Folks -- 
I have a client (an office of therapists) who is looking for a customized
Intranet solution, with very complex calendar and contact management tools.
The client would be using this Intranet to share confidential, client
information. 

Due to the nature of my client¹s business, I believe this site would need to
comply with the Health Insurance Portability and Accountability Act (HIPAA),
which mandates a legal and regulatory environment governing the security and
confidentiality of individually identifiable protected health information.
Therefore, any healthcare organization using the Internet to send Protected
Health Information (PHI) must take steps to protect themselves from known
Internet threats. 

I don¹t have the expertise to create a website that meets these needs, so my
client met with an independent design firm to discuss the project. The firm
then provided a starting estimate of $20,000. When the firm factored in
HIPPA, the estimate jumped almost $40,000 dollars.

There are many aspects of a project like this that I am confused about:

1. How does an act like HIPPA affect the structure and development of a
website in comparison to a public, database driven website? Would this
result in a more costly website?
2. How do HIPPA and Internet Law intersect? What impact does this have on a
project like this? 
3. What resources are available to learn more about HIPPA and the Internet?
(I did Google already)
4. Do open source calendar and contact management tools exists for
customization? 
5. This solution needs to be remote. Would Outlook be a useful tool by any
stretch of the imagination?

I know the details of this scenario are vague, any general thoughts?

As always, THANKS. 


__________________________________________________________________________
Be sure to trim your posts and delete personal information such as
telephone numbers if you do not want them in the archive.

To unsubscribe send a blank message with unsubscribe in the subject to 
webproducers-request@xxxxxxxxxxxxx

The WPO list is a public discussion forum with a public web archive linked at 
www.WebProducers.org.