This message has been cross posted to the following eGroups: Privacy Officer's Roundtable and HIPAA .
-------------------------------------------
An employed surgeon of a rural hospital wants to hire a data analyst to access the hospital system and collect data for a research project. The data analyst will not be a hospital employee or go through the hospital compliance & privacy training. The surgeon wants the data analyst to gather data on his patients for specific procedures that he has performed as he is presenting the data in a book on the topic. The hospital has a BAA and confidentiality agreement with the data analyst, and IS will audit access. Can you think of any other concerns related to the data analyst? The book is a completely different step but if anyone has experiences to share, I would love to hear them.
-------------------------------------------
Sharon Blackwood, MT(ASCP), MBA, CHC, CHPC
-------------------------------------------