Digital Health Innovation Academy

Module Descriptions & Objectives 

Foundations

Module 1 – Digital Health Launchpad: Navigating Privacy & Security in Healthcare Innovation 

• Provides an overview of the health ecosystem focusing on compliance, risk management and commercialization paths. 
• Covers privacy laws, patient data governance, and establishes fundamental credibility and effective information management in healthcare. 
• Delves into the specifics of privacy and security in healthcare innovation including digital health product commercialization and legislation.  

Module 2 – Privacy in Practice: Implementing Principles for Information Protection 

• Explores Privacy by Design principles and their application in healthcare data governance. 
• Guides through practical application of the Health Information Act and the Personal Information Protection Act focusing on consent, minimal data collection and secure information handling. 
• Includes workshop activities to develop privacy governance strategies focusing on healthcare information management for commercialization and exit strategies. 

Module 3 – Privacy as Power: Transforming Compliance into Competitive Advantage  

• Emphasizes managing information privacy and security risks within regulatory compliance frameworks. 
• Covers Fair Information Practices, including individual rights and the lifecycle of information. 
• Workshop activities include defining privacy capabilities, mapping data processing, and using tools like National Institute of Standards and Technology (NIST) Privacy Risk Assessment Methodology. 

Advanced Modules 

Module 4 – Digital Health Compliance: Documenting Privacy & Security using NIST Frameworks        

• Workshop-based course using NIST worksheets for system design assessment, cataloging contextual factors and identifying specific data actions. 
• Focuses on assessing and mitigating risks to ensure technology compliance. 

Module 5 – Healthcare Innovation & Risk Management: Assessing and Cataloging Risk  

• Workshop-based course utilizing the NIST Catalog of Problematic Data Actions and Problems. 
• Aids in applying consequences of data processing issues and guides through risk assessment, calculation, prioritization, and response strategies. 

Module 6 – Strategic Risk Control in Digital Healthcare: Mastering NIST Frameworks 

• Focuses on mastering risk management in digital health using NIST SP 800-53B. 
• Teaches the application of various control types (preventive, detective, corrective, deterrent, compensating) and analyzes their effectiveness. 
• Aligns controls with business objectives and regulatory requirements, considering scalability and integration with existing security infrastructure. 

Brightsquid Consulting Services 

Upon successful completion of the Foundation and Advanced modules, interested participants will have the opportunity to work directly with Brightsquid to prepare for SOC 2 Compliance (international) and HIPAA Compliance (USA), as well as assistance with Privacy Impact Assessment filings in Alberta.  

(Consulting Fee: $6750 per company)