IT504-3: Evaluate the ethical, legal and regulatory implications of adopting technologies.

IT504-3: Evaluate the ethical, legal and regulatory implications of adopting technologies.

Scenario

Under Course Resources > Course Documents, you will find a document called IT504_CARE4All_Information. Please read the document in its entirety as it is needed for this Assignment. In addition, do the Learning Activity for this unit as it is also needed for this Assignment.

Sara and Bob know that in time that they want to extend their reach to the consumer market. The idea is for an individual to rent a CARE4All system to help with the care and management for a loved one. As a short-term solution, orders can be taken via purchase orders, but in time, the vision is to have a website that accepts credit cards. They know there is something called the Payment Card Industry Data Security Standard (PCI DSS) but are not sure what it means to the business. All they know is that the CARE4All manufacturer said the entire supply chain must adhere to HIPAA. In addition, being that the CARE4All system handles a customers’ medical information, they also know that they need to be compliant with the Health Information Insurance Portability and Accountability Act (HIPAA).

Sara and Bob admit they know nothing about PCI DSS and HIPAA details and how it specifically impacts the company. What Sara and Bob do know is that CARE4All Distributors, Inc. will be handling a lot of customer data from credit card information to healthcare information from types of illnesses to medicines and dosages a person takes for chronic illness. They also know that keeping the data secure is important as they read all of the time about data breaches and about how companies are losing their reputations and having to pay steep fines. They want to make sure the appropriate business processes and technologies are put into place, as they never want to jeopardize customer data, but they also realize that they do not have a lot of money in the bank. They are looking to you for help.

Instructions:

Sara and Bob need education on the legal, regulatory, and compliance implications in regards to keeping customer data safe. Also, they need to understand any ethical responsibilities they have as leaders of the company. Understanding these concepts will help them when they move forward building business processes and/or deploying information technology.

You are going to educate them by writing an informative or expository essay to answer the following questions:

Understanding HIPAA

1. What is HIPAA and how does it relate to business objectives?

2. What IT products and/or services help with HIPAA compliance?

Understanding PCI DSS

3. What is PCI DSS and how does it relate to business objectives?

4. What IT products and/or services help with PCI DSS?

Legal and Ethical Responsibilities

5. Are there legal responsibilities when adopting IT for HIPAA and/or PCI DSS?

6. Are there ethical responsibilities when adopting IT for HIPAA and/or PCI DSS?

Potential Risks

7. As a way to understand the risks, what happens if HIPAA is violated?

8. As a way to understand the risks, what happens if there is a credit card breach?

Related Topics

9. What other acts, laws, regulations, or rules do you need to know?

10. If your company branches out to other countries, what are the implications?

Assignment Requirements:

• This Assignment will require research as you will not find all the answers in your readings and/or videos. Use at least three credible sources (check the library and look for reliable materials). Properly cite ideas using APA in-text citations in the body, and full APA reference entries at the end of the paper.
• Paraphrase all information for this Assignment (do not use quotes).
• Write 1 paragraph of at least 100 words for each of the 10 rubric items.
• To organize your paper, provide a subheading for each of the five main sections. For this Assignment, it is authorized and recommended to copy the five subheadings offered above (“Understanding HIPAA,” etc.). Then, place the two related paragraphs of content under each subheading.
• Format your Word document as an APA paper using Times New Roman, 12-point font, 1″ margins, double spacing, and following all other APA rules. Include a cover page, abstract, and reference page(s). A table of contents is not necessary.
• See the Writing Center for information about writing an informative or expository essay.
• No spelling errors.
• No grammar errors.
• No APA errors.