A Formalization of HIPAA for a Medical Messaging System

Abstract. The complexity of regulations in healthcare, financial services, and other industries makes it difficult for enterprises to design and deploy effective compliance systems. We believe that in some applications, it may be practical to support compliance by using formalized portions of applicable laws to regulate business processes that use information systems. In order to explore this possibility, we use a stratified fragment of Prolog with limited use of negation to formalize a portion of the US Health Insurance Portability and Accountability Act (HIPAA). As part of our study, we also explore the deployment of our formalization in a prototype hospital Web portal messaging system.

• Type: Conference
• Year: 2009
• Where: TRUSTBUS
• Authors: Peifung E. Lam, John C. Mitchell, Sharada Sundaram
• Keywords: Effective Compliance Systems, Health Insurance Portability And Accountability Act, Security Privacy, TRUSTBUS 2009, We Believe