Forms are pervasive on web sites; the number of forms associated with medical web sites is growing exponentially as everyone is scrambling towards the goal of a paperless office, seeking to optimize time spent processing applications and managing patient data, speeding up the process of making appointments and getting referrals, meeting meaningful use, etc.
Web forms used in the medical industry generally have to be HIPAA-compliant, however, as they almost always involve the input and transfer of ePHI in one way or another. That presents a problem as the requirements for a HIPAA-compliant web site are complex and take knowledgeable and experienced developers to implement and take extra time and money to get right — and you really have to get things right where HIPAA is concerned.
So, this is where most people are:
- They have a web site, which itself is likely not HIPAA compliant yet
- The have some web forms already … or maybe have some forms that they want to put up
- These forms will collect ePHI
- They need to set this up and have it be HIPAA compliant and don’t want to spend a lot of money or time getting it going.
Read the rest of this post »