Management and Policy: Mapping HIPAA to the Middleware Layer

Abstract

This session provides an overview of how middleware can be used to address regulatory issues that often span application and organizational boundaries. HIPAA requirements for security and privacy and the ability to manage and audit access and use will be reviewed in the context of research, education, and clinical practice. These requirements are then mapped to middleware resources and activities. This session will include an overview of the special challenges surrounding coordinated planning and execution of information technology projects by central IT units and the academic medical center staff.