Taking the Bite Out of HIPAA

1
Taking the Bite Out of HIPAA
2
Whats In Store For You

• Today, we will be discussing
• HIPAA Overview
• Protected Healthcare Information (PHI)
• Privacy Practices
• Individual's Rights to Medical Records
• Controlling PHI Access

3
What is HIPAA?

• Health Insurance Portability and Accountability
  Act of 1996
• Improves the portability, security, privacy
  through standardization
• Regulates health care providers, health care
  clearinghouses, and health plans
• Impacts every employer that provides health
  benefits to its employees

4
HIPAA applies to

• Covered Entity
• Health plans, health care providers, and health
  care clearinghouses
• Hybrid Entity
• Business activities include both non-covered and
  covered functions
• Business Associates
• Performs certain activities on behalf of covered
  entity

5
Protected Health Information

• Protected Health Information (PHI) is
• Health information created or received by a
  covered entity
• That identifies or can be used to identify an
  individual, and
• All elements of dates, except year
• Relates to
• The past, present, or future physical or mental
  condition of the individual,
• Health care provided to the individual, or
• Payment for that health care

6
Identifiable Health Information

• Name
• Address
• Telephone numbers
• E-mail addresses
• Fax numbers
• Social Security numbers
• Medical records number
• Health plan beneficiary numbers

• Account numbers
• Certificate/license numbers
• Any vehicle/device serial numbers
• Web Universal Resource Locators (URL)
• Internet Protocol addresses
• Finger or voice prints
• Photographic images (x-rays)
• Any other unique identifying number,
  characteristic, or code

7
Individual Privacy Rights

• Right to Inspect and Copy
• Right to Amend
• Right to an Accounting of Disclosures
• Right to Request Restrictions
• Right to Request Confidential Communications
• Right to a Paper Copy of Notice of Privacy
  Practices

8
Penalties for Failure to Comply

• Investigation initiated by DHHS or individual
  complaints
• The DHHSs Office of Civil Rights may fine
  covered entities 100 per day per person
• Maximum fine in a single calendar year of 25,000
  per violation of a single standard
• Knowing misuse or improper disclosure could
  result in a criminal fine or prison

9
HIPAA Resources/Links

• Helpful Websites
• http//www4.semo.edu/humanresources/HIPAA
• http//www.hhs.gov/ocr/hipaa/privacy.html
• http//www.dhhs.gov/ocr/faqs1001.doc