Privacy and security in Pennsylvania: ensuring privacy and security of health information exchange in Pennsylvania.

Though HIPAA addresses privacy and security on a nationwide basis, state laws and regulations vary. This paper describes the landscape for privacy and security in Pennsylvania and its key elements. It addresses common myths and misunderstandings and provides an overview of what is actually required to provide needed protections privacy policies from government and the stakeholders; risk analysis and management; and technical and non-technical means to enforce policies and mitigate risks. Also covered are the enablers, barriers and key recommendations for the future.