A research study submitted in partial fulfillment of the requirements for the degree of Master of Science in Information Management, School of Engineering of Technology

Efficient healthcare services are the most prominent challenges for health service providers. Technologies are advancing further and changing rapidly to provide services promptly, efficiently and effectively. Information technology has brought the revolution in service sectors but mean time facing challenges on securit y and privacy protection. Health care information are very personal and one of the most sensitive information. Improper health policy and faulty system design can lead to violation of privacy rule and misuse of information which is related to health care p ractitioners{u2019} ethical aspects. Most of the governments are enforcing the laws to protect health care information of a patient. Generally, it is the patient{u2019}s right to decide whom to share his personal health information and it is unethical and illegal to d isclose, share or distribute someone{u2019}s information for business, profit or any other purpose without his consent. This research study mainly focuses on the Health Insurance portability and Accountability Act (HIPAA). The HIPAA Law specifications about s ecurity and privacy rule. The security rule has three safeguards {u2013} administrative, physical and technical to protect the health information. Objective of this research is compliance of HIPAA by use of access control policy as technical safeguard.

Research Studies Project Report (M.Sc.) - Asian Institute of Technology, 2012