1. HIPAA Pre-Clerkship Review Dr. Maryann Skrabal, Pharm.D., CDE

2. What is HIPAA? Health Insurance Portability and Accountability Act Health Insurance Portability and Accountability Act A new federal law that requires health care providers to protect the privacy of their patients’ health information. A new federal law that requires health care providers to protect the privacy of their patients’ health information. Stiff penalties including fines and prison terms associated with noncompliance. Stiff penalties including fines and prison terms associated with noncompliance. “Confidentiality” should be how it has been practiced for years. “Confidentiality” should be how it has been practiced for years.

3. What is PHI? Protected Health Information: information resulting from demographic information being paired with physical or mental health or health insurance/prescription information. Protected Health Information: information resulting from demographic information being paired with physical or mental health or health insurance/prescription information.

4. Where will pharmacy students find Protected Health Information? Medical records Medical records Billing records Billing records Rounds Rounds Emails Emails Electronic databases Electronic databases ……. …….

5. Use “minimum necessary”… We must take reasonable efforts to use and disclose only the ‘minimum necessary’ amount of protected health information appropriate to the situation. We must take reasonable efforts to use and disclose only the ‘minimum necessary’ amount of protected health information appropriate to the situation. Reasonable to limit to “need to know” basis. Reasonable to limit to “need to know” basis. Students: what information do you NEED to provide pharmaceutical care? Students: what information do you NEED to provide pharmaceutical care? Probably not home address, insurance information, etc... Probably not home address, insurance information, etc...

6. Yes or No? If I need to find out some health information from a patient and his family is in his room, is it ok to go ahead and speak in front of them? If I need to find out some health information from a patient and his family is in his room, is it ok to go ahead and speak in front of them? It is strongly recommended that you speak to the patient alone if possible. Obtain permission from the medical staff if others need to be involved in the discussion because of caregiver or provider roles. It is strongly recommended that you speak to the patient alone if possible. Obtain permission from the medical staff if others need to be involved in the discussion because of caregiver or provider roles.

7. Can I keep notes about my patients? Yes, but protect the information! Yes, but protect the information! Do not leave written materials, pocket PCs, PDAs, or laptops with patient information anywhere that someone else could access them. Do not leave written materials, pocket PCs, PDAs, or laptops with patient information anywhere that someone else could access them. Be careful about leaving patient information in your lab coat and leaving your lab coat unattended. Be careful about leaving patient information in your lab coat and leaving your lab coat unattended. Shred paper documents when finished, delete information from computers and PDAs. Shred paper documents when finished, delete information from computers and PDAs.

8. Tips… When talking about patients, keep voices low and as private as possible. When talking about patients, keep voices low and as private as possible. Avoid ‘elevator talk’ Avoid ‘elevator talk’ Use discretion when calling out names in waiting rooms. Use discretion when calling out names in waiting rooms. Appointment lists should be kept private and not posted. Appointment lists should be kept private and not posted. De-identify patient information when discussing cases. De-identify patient information when discussing cases.

9. …more tips... Never leave medical records unattended. Never leave medical records unattended. Respect privacy when requesting medical information over the telephone. Respect privacy when requesting medical information over the telephone. Do not share passwords. Do not share passwords. Always log off of the computers when finished. Always log off of the computers when finished. Password protect your computers and PDAs. Password protect your computers and PDAs. Shred all information when finished. Shred all information when finished.

10. Site Training Each site has HIPAA requirements in place. Each site has HIPAA requirements in place. Speak to your preceptor on the first day of your clerkship to find out if you need additional training for that particular site. Speak to your preceptor on the first day of your clerkship to find out if you need additional training for that particular site.

11. Question: Which of the following are true? A. Never leave a patient’s medical record unattended. B. Always log-off computers when finished. C. Discuss your patients in the hospital cafeteria with fellow students during lunchtime. D. Both A and B are true. E. All of the above are true.

12. Questions?