2/14/14-HIPAA

Question 1

What does HIPAA stand for?

Answer 1

Health Insurance Portability and Accountability Act

Question 2

What was the intent of HIPAA?

Answer 2

• to prevent loss of insurance when you change jobs

- to ensure the privacy of PHI (protected Health Information)

Question 3

What did HIPAA start out as?

Answer 3

a portability law, and they realized privacy would be a big issue

Question 4

What are the patient’s rights according to HIPAA?

GO BACK TO THIS CARD AND LISTEN, NOT COMPLETE!**

Answer 4

• the ability to make informed choices when seeking care
• The ability to find out how Personal Health Information is used.
• To limit the release of PHI to the minimum necessary
• They have the right to see their records

Question 5

What are the two rules within HIPAA?

Answer 5

1. Privacy rule: privacy of electronic health information (WHAT)
2. Security Rule: Establishes the standards for the privacy of the electronic information (HOW)

Question 6

Through HIPAA, what is protected?

Answer 6

anything to do with your health:

• Blood work
• Diagnoses
• EEGs
• EKGs
• Any and all test results
• Etc.
• Conversations between you and your doctor or nurses
• Billing information
• medical information in your health insurers computer system
• Medical information that identifies you cannot be unnecessarily shared

Question 7

Through HIPAA, another thing that is protected is individually identifiable health information, describe what this is.

Answer 7

This is a subset of health information:

• Name
• Address
• Telephone number
• Email
• Medical Record #
• SSN

Question 8

According to HIPAA, what are the employer’s responsibilities?

Answer 8

• notify patients about their privacy rights and how PHI is used.
• Adopt & IMPLEMENT privacy procedures
• Train employees in privacy procedures
• designate an individual to be responsible

**This happens mostly in the hospital or medical private practice (clinic)

Question 9

Who has to follow HIPAA?

Answer 9

• doctors
• nurses
• hospitals
• clinics
• nursing homes
• Health insurers insurance
• HMO
• Medicare and Medicaid

**these are all considered covered entities

Question 10

According to HIPAA, what are covered entities?

Answer 10

-a health care provider that conducts certain transactions in an electronic format or uses a clearing house

Question 11

According to HIPAA, who are not covered entities?

Answer 11

• life insurance companies
• employers
• schools
• worker’s comp carriers that might have medical information about you
• State agencies & Law enforcement

Question 12

According to HIPAA, what are covered transactions?

Answer 12

• electronic health care claims
• electronic remittance & payment advice
• checking the status of a claim
• referral certification & authorization

Question 13

According to HIPAA, what are considered electronic forms?

Answer 13

• internet
• extranet
• leased lines
• dial-up lines
• private networks
• magnetic tape, disk, or CD media

Question 14

According to HIPAA, what are the authorization rules?

Answer 14

• written authorization
• you must keep a copy
• patient must get a copy
• authorization may be revoked at any time
• date
• purpose of disclosure
• expiration date
• signature/date
• when faxing, the recipient must be at the fax machine at the other end. Call to ensure this

Question 15

At the MRLSHC, what do we require in terms of confidentiality?

Answer 15

• we require a new authorization form each semester
• signed RELEASE FORM to send information
• signed RELEASE FORM to receive information
• information exchange release form
• school site visit release form

**Only department secretaries, chair, and clinic coordinator may remove faxes from the machine

Question 16

What does a notice of privacy practices include?

Answer 16

• Patients must receive a letter stating how you protect their PHI and maintain confidentiality.
• They must sign a form stating that they received this information.