March 24, 2005

Mandatory HIPAA Security Awareness for All Employees (including Faculty and Staff)

Dear Colleagues,

Johns Hopkins is committed to protecting the privacy of our patients and health plan members and the confidentiality of their personal information. As you know, Hopkins, along with most health care providers and health plans nationwide, is required by law to protect such privacy under the federal Health Insurance Portability and Accountability Act (HIPAA). This includes a requirement to preserve the security and confidentiality of protected health information in electronic form (E-PHI) - often maintained on computers and portable devices or transmitted electronically.

Beginning April 20, 2005, regulations that cover such security measures for E-PHI become effective and enforceable under the HIPAA Security Rule. It is critical that you appreciate the role that you play in compliance by using your computer responsibly and following good information security practices.

To ensure that you obtain this information, all employees (including faculty and staff) of all affiliates of Johns Hopkins Medicine, all covered portions of Johns Hopkins University, and all Johns Hopkins health plans are required to review a HIPAA Security Awareness handout by April 20. Participation is mandatory and will be monitored. You will receive this handout from your manager or supervisor in the coming weeks as he or she attends one of the HIPAA Security information sessions being held for all managers and supervisors through early April. After reading the handout, you must return a signed Acknowledgment and Agreement to Comply form to your manager by April 20.

I encourage you to talk to your manager or supervisor about HIPAA Security, what it means for you and your work area, and how to obtain the HIPAA Security Awareness handout and complete the Acknowledgment. If you need additional information, visit www.insidehopkinsmedicine.org/hipaa or call the Johns Hopkins Privacy Officer at 410-735-6509.

As the nation's number one health care provider, it is our duty to be a leader in compliance with HIPAA, including the HIPAA Security regulations, demonstrating to our patients and health plan members our commitment to the security of their information. Thank you for your cooperation and support.

Regards,

Edward D. Miller, M.D.
Dean of the Medical Faculty
Chief Executive Officer
Johns Hopkins Medicine