How one state prepared for HIPAA rules

The Health Insurance Portability and Accountability Act's privacy rules that take effect next month run to 40 pages in the Federal Register 'in three columns, in tiny print,' said Mary Gerlach, CIO of New Mexico's Health Department.

Her state operates substance abuse and mental health services for 1.8 million widely dispersed residents.

It also has programs for the developmentally disabled, as well as six residential health facilities, hospitals and a research laboratory. There are no county health departments and only the city of Albuquerque has its own health department.

Gerlach said New Mexico had no choice but to establish an electronic tracking system for the HIPAA privacy information.

'Instead of remediating our legacy systems, we built the Integrated Client Data System atop our legacy systems,' Gerlach said. ICDS runs under Microsoft Windows 2000 Server and uses Active Directory services. It has a SQL Server 2000 back end and an front end.

About the Author

Trudy Walsh is a senior writer for GCN.


  • Records management: Look beyond the NARA mandates

    Pandemic tests electronic records management

    Between the rush enable more virtual collaboration, stalled digitization of archived records and managing records that reside in datasets, records management executives are sorting through new challenges.

  • boy learning at home (Travelpixs/

    Tucson’s community wireless bridges the digital divide

    The city built cell sites at government-owned facilities such as fire departments and libraries that were already connected to Tucson’s existing fiber backbone.

Stay Connected