HIPAA Governing Board Training September 28, 2006
What is HIPAA?? HIPAA is the Health Insurance Portability and Accountability Act of It is a law which gives patients the right to gain access to their records, to request amendments to their health information, and which limits ways the facility uses their information.
Privacy & Security HIPAA has two elements: HIPAA privacy - entitles the patient to 100% confidentiality of their “protected health information” (PHI) HIPAA privacy - entitles the patient to 100% confidentiality of their “protected health information” (PHI) HIPAA security - entitles the patient to 100% confidentiality of their “electronic protected health information” (ePHI) HIPAA security - entitles the patient to 100% confidentiality of their “electronic protected health information” (ePHI)
What is PHI? PHI is individually identifiable health information about an individual PHI is individually identifiable health information about an individual Examples: A patient’s name, address, social security number, age, employer, medical condition, medications, etc. Examples: A patient’s name, address, social security number, age, employer, medical condition, medications, etc.
What is ePHI? ePHI is electronic protected health information maintained or transmitted in electronic form. ePHI is electronic protected health information maintained or transmitted in electronic form. Examples: Electronic information which includes a patient’s name, address, social security number, age, employer, medical condition, medications, etc. Examples: Electronic information which includes a patient’s name, address, social security number, age, employer, medical condition, medications, etc.
Use of PHI and ePHI Treatment, payment, and daily operations Treatment, payment, and daily operations Appointments and recalls Appointments and recalls Research Research Workers’ Compensation Workers’ Compensation Public health issues such as disease control Public health issues such as disease control Victims of abuse, neglect, domestic violence Victims of abuse, neglect, domestic violence Investigations or government activities Investigations or government activities Lawsuits and disputes Lawsuits and disputes Law enforcement Law enforcement Coroners, medical examiners, and funeral directors Coroners, medical examiners, and funeral directors
What does this mean to me? protect patient’s information protect patient’s information properly dispose of any paperwork that is no longer needed, but has private patient information on it, by shredding it properly dispose of any paperwork that is no longer needed, but has private patient information on it, by shredding it keep records locked up when not in use keep records locked up when not in use
What does this mean to me? only discus a patient’s information with persons who are authorized to know the information only discus a patient’s information with persons who are authorized to know the information report a violation or situation that could cause a violation immediately to the Human Resource Director report a violation or situation that could cause a violation immediately to the Human Resource Director
HIPAA complaints are thoroughly investigated and, if found substantiated, employees who violate a patient’s protected rights are subject to corrective action up to and including dismissal.
For more information please contact Kathrine Hall Human Resource Director