1. POP QUIZ!!! Can fraud be accidental? What do you call organizations who must abide HIPAA regulations? What does ‘minimum standard necessary’ mean?

2. POP QUIZ!!! Can fraud be accidental? – No. What do you call organizations who must abide HIPAA regulations? – Covered entities What does ‘minimum standard necessary’ mean? – Releasing only as much information as you need to.

3. 2 HIPAA, HITECH, and Medical Records Lecture 3

4. 2.9 Enforcement and Penalties 2-23 HIPAA final enforcement rule—law designed to combine the enforcement procedures for privacy and security standards into a single rule Office for Civil Rights (OCR)—government agency that enforces the HIPAA Privacy Act Criminal violations of HIPAA privacy standards are prosecuted by the Department of Justice (DOJ) – Other standards are enforced by the CMS

5. 2.10 Compliance Plans 2-24 Compliance plan—medical practice’s written plan for complying with regulations – Used to uncover compliance problems and correct them to avoid risking liability – A process for finding, correcting, and preventing illegal medical office practices Respondeat superior—doctrine making employers responsible for employee actions