Meaningful Use Data Security Requirements

Meaningful Use provides a unique opportunity for hospitals and physicians to receive incentive funds to assist with implementation of electronic health records.

Both Stage1 and Stage2 have protection of electronic health record information as core requirements.  The objectives & measures in the table below make it clear that conducting a Risk Analysis is the first step in establishing a data security program.  Organizations attesting for Meaningful Use funds should research the requirements in NIST publication 800-66.

CSB IT Solutions use these guidelines as a foundation for our Data Security Assessment.  More detailed information can be obtained by clicking on the Data Security Assessment link on the right side of this page as well as the NIST publication below and review the CMS fact sheet:

NIST HIPAA Resource Guide for HIPAA Security Rule 

CMS_SecurityRiskAssessment_FactSheet

Both Stage1 and Stage 2 have core Meaningful Use requirements that clearly identify the need for a Risk Analysis. We view this as the starting point for compliance.