Bob Gross, HIPAA Program Manager, University of Chicago Hospitals, and Suzi Birz, Principal, HiQAnalytics, conduct an open forum around key issues currently being addressed at the UCH. Even though the deadline to comply with the HIPAA Security Rule has passed, health care organizations still struggle with how to address security issues for which there are technical solutions available, but the solutions may be considered prohibitive for reasons including cost, impact to user, and impact to support desk resources. This collaborative discussion will include how to secure patient data on laptop computers, encrypt patient-provider email communications, and implement and enforce password management policies. Please join this discussion and share your ideas or experiences.