2. HIPAA Definitions What Does PHI Include?
Information in the health record, such as:
Encounter/visit documentation
Lab results
Appointment dates/times
Invoices
Radiology films and reports
History and physicals (H&Ps)
Patient Identifiers
Lab
Physical
X-Ray

3. What Are Some Examples of Patient Identifiers?
HIPAA Definitions
What Are Some Examples of Patient Identifiers?
Web universal resource locaters (URLs)
Any dates related to any individual (date of birth)
Telephone numbers
Fax numbers
addresses
Biometric identifiers including finger and voice prints
Any other unique identifying number, characteristic or code
Names
Medical Record Numbers
Social Security Numbers
Account Numbers
License/Certification numbers
Vehicle Identifiers/Serial numbers/License plate numbers
Internet protocol addresses
Health plan numbers
Full face photographic images and any comparable images

4. Safeguards
Implementation of administrative, physical and technical safeguards (work in tandem with Security rule).
Safeguard PHI from any intentional or unintentional use or disclosure.
Limit incidental uses and disclosures that occur as a result of otherwise permitted or required uses and disclosures.
Example: create safeguards to prevent others from overhearing PHI.

5. IT Security Review – When and How
When any of the following are true:
Contract or Agreement involving UNMHSC Information Assets
Transmitting, storing, sharing or processing of UNM Information Assets that require IT security protections.
How do I request an IT Security Review –
Create a self-service ticket using
Attach the Preliminary Security Questionnaire