Online Tech's Risk Management Officer and Security Officer, Jason Yaeger shares his experience guiding a company through a HIPAA audit. Yaeger discusses the impact of HIPAA certification on his role, company policies, and day-to-day operations for employees of a HIPAA compliant data center.

1. Impact of HIPAA Compliance on Business
Associates – Changes to Company Policies and
Day-to-Day Operations
With Speaker:
Jason Yaeger, Risk Management & Security Officer, Online Tech
Jason Yaeger is Online Tech’s Risk Management and Security Officer. In his 3 years at Online Tech, Jason has guided the company
through successful completion of many audits, including SAS 70 Type I, SAS 70 Type II, SSAE 16, and HIPAA. In addition to
overseeing operations across all of Online Tech’s data centers, Jason is also the Vice President of the Southeast Michigan
Chapter of 7x24 Exchange. Prior to Online Tech, Jason was Director of Internet Operations at 20/20 Communications where he
spent 8 years developing the company’s wireless and internet initiatives.
Moderated By:
Mike Klein, President & COO, Online Tech
Mike is a serial entrepreneur with more than 30 years of high tech business leadership, technology, and startup experience
including CEO of Interlink Networks, Managing Partner of CompanyCrafters, and CEO /Founder of Steeplechase Software, an INC
500 Company which he sold to Schneider Electric. Prior to becoming an entrepreneur, Mike spent the first decade of his career
working in sales, strategic marketing, product development at Motorola Semiconductor and Rockwell International.
Upcoming Events
Webinar: Sharing PHI Data? Legal Implications of BAAs & Avoiding HIPAA Pitfalls, Tuesday, November 8th @ 2p.m. ET
Conference: Midwest HIMSS Fall Technology Conference in Indianapolis, Booth 57
Open House: December 2nd, 3–7pm. Tour our newest HIPAA compliant data center. RSVP www.onlinetech.com/openhouse
Colocation Dedicated Servers Private Clouds
Copyright © 2011 Online Tech. All rights reserved www.onlinetech.com 734.213.2020

2. 3 Major Changes
• Business Risk Assessment
– Annual basis
– Remediation plan
– Ongoing progress checks at least every 6 months
• Data Review
– Sensitive Client Data (e-PHI, PCI, etc) = every 6 months
– Internal Use = every year
– Public = every 3 years
• Business Associate Agreement (BAA)
– Full review of all policies
– Most BAA’s given to us don’t meet the HITECH act
Colocation Dedicated Servers Private Clouds
Copyright © 2011 Online Tech. All rights reserved www.onlinetech.com 734.213.2020

3. Colocation Dedicated Servers Private Clouds
Copyright © 2011 Online Tech. All rights reserved www.onlinetech.com 734.213.2020

4. Risk Status
Colocation Dedicated Servers Private Clouds
Copyright © 2011 Online Tech. All rights reserved www.onlinetech.com 734.213.2020

5. Compliance Status
Colocation Dedicated Servers Private Clouds
Copyright © 2011 Online Tech. All rights reserved www.onlinetech.com 734.213.2020

6. Upcoming Events
Webinars: Contact Info
Tuesday, November 8th @ 2p.m. ET
Online Tech
Sharing PHI Data? Legal Implications of BAAs & Avoiding HIPAA Pitfalls contactus@onlinetech.com
With special guest speaker Tatiana Melnik, Attorney, Dickinson Wright PLLC. http://www.onlinetech.com
Main: 734-213-2020
Events:
November 13-15th in Indianapolis, Indiana
Midwest HIMSS Fall Technology Conference
Friday, December 2nd in Ann Arbor, MI 3-7p.m. ET
New Data Center Open House
www.onlinetech.com/openhouse
February 20-24th in Las Vegas, Nevada
HIMSS Annual Conference & Exhibition
Colocation Dedicated Servers Private Clouds
Copyright © 2011 Online Tech. All rights reserved www.onlinetech.com 734.213.2020