The HIPAA Roadmap for Ambulatory Care is a step-by-step guide to HIPAA/HITECH compliance for health care providers, with emphasis on changes to policies, procedures and forms required under HITECH and the Omnibus Final Rule. HIPAA covered entities will need to comply with the new rules prior to September 23, 2013. The HIPAA Roadmap for Ambulatory Care is designed to provide physician practices, ambulatory surgery centers, therapy providers, and other outpatient providers make the necessary changes to their HIPAA policies and forms in a thorough and efficient manner. The HIPAA Roadmap for Ambulatory Care includes sample policies to implement the new patient rights established under HITECH and the changes relating to marketing, sale of PHI, fundraising and release of immunization records. The Roadmap also includes a sample Notice of Privacy Practices incorporating the changes required under HITECH, sample breach policy complying with the Omnibus Final Rule, and sample Business Associate Agreement and amendment. While the Roadmap focuses on the changes to HIPAA resulting from HITECH and the Omnibus Final Rule, the Roadmap also includes resources for new providers that are setting up their HIPAA policies. Documents of particular interest to new providers include job descriptions for the HIPAA Privacy Official and Security Official, and a sample training presentation for employees on information security practices. Also included are tools for performing a security risk analysis as required under the HIPAA Security Rule, and information security policies covering administrative, physical and technical safeguards required under the Security Rule standards and implementation specifications.