1. Company LOGO Data Privacy HIPAA Training

2. Progress Diagram Function in accordance Apply your knowledge Learn the Basics Orientation Evaluation Training Receive further Training Implementation

3. Agenda 1. HIPAA-Definitions 2. Potential Departments Impacted 3. Questions to Determine Impact 4. Types of Information Protected 5. How To’s 6. Don’ts 7. HIPAA-Flow Chart

4. Definitions HIPAA Health Insurance Portability and Accountability Act of 1996 Designed to Protect Privacy of Patient Information by securing electronic and physical medical information. Theory- »”A student’s rights and welfare must not be sacrificed for scientific or medical progress”.

5. Definitions (Continued) Protected Health Information (PHI)-IIHI created, or received, by a covered entity related to past, present, or future, physical or mental health of an student. Standard Transactions-coordination of benefits, health care claims, health care payments, enrollment or disenrollment in health plan, eligibility for a health plan, first report of injury, health plan premium payments, referral certification and authorization, health claims attachments and others as prescribed by DHHS secretary.

6. Potential Areas Impacted Counseling Services Dept of Counseling Professions Health and Human Performance Athletics Health Services Does your department need Evaluation? PHI-In need of Evaluation? Child Care Center International Students Office Human Behavior and Diversity Human Resources ?

7. Does this Impact my Department? Three Questions to Ask 1. Are we dealing with IIHI? 2. Do we perform one of the standard transactions? 3. Do we transmit information electronically?

8. Types of Info protected Name Social Security Number Lab Results Diagnosis Treatment Date of Birth Telephone Number Email address Account Numbers IP addresses Any unique identifying information Medical Record Number Counseling Use Location of Treatment Medications Referrals Other Info commonly found in health care records

9. How To’s 1. FERPA first 2. Hybrid Entity

10. How To’s (continued) 3. Authorization for Release of Information “Core elements” Permission to disclose without release

11. How To’s (continued) 4. Encryption- http://www.cs.virginia.edu/papers/0130027 1.pdf 5. Research and HIPAA- http://privacyruleandresearch.nih.gov/auth orization.asp

12. Don’ts Release Medical information to outside employer Don’t release information that can be used for marketing or advertising purposes Release information related to mental health counseling sessions or physical health without proper authorization Send IIHI electronically without proper encryption technology

13. HIPAA Flow Chart Orientation EvaluationTraining Implementation Awareness and Education Identify Risk Request for further Training Planning And Further Assessment

14. Company LOGO THE END