Becoming HIPAA Compliant

Question 1

HIPAA privacy vs security

Answer 1

privacy: people, security: electronic

Question 2

why care?

Answer 2

<ul>
<li>financial penalities</li>
<li>publicity</li>
<li>loss of accreditation</li>
<li>late compliance increased cost</li>
<li>litigation damages</li>
<li>jail</li>
</ul>

Question 3

HIPAA Privacy objectives

Answer 3

1. protect Privacy&Security 2. provide rights

Question 4

HIPAA Privacy components

Answer 4

1. compliance officer 2. employee training 3. formal documents and controls

Question 5

HIPAA Security objectives

Answer 5

ePHI not stolen, misused

ePHI available

Question 6

HIPAA Security components

Answer 6

1. compliance officer 2. validate and fix 3. formal documents and controls

Question 7

common HIPAA violations

Answer 7

<ul>
<li>email noncompliant</li>
<li>no BA contract</li>
<li>not training employees</li>
<li>not retaining medical records</li>
<li>inadequate ePHI|PHI disposal</li>
<li>not notifying breach</li>
<li>not having formal documentation w/ policies, procedures</li>
</ul>