HIPAA Flashcards
PHI
Protected health info
When does state law prevail over federal
When state law is more restrictive
7 Patient privacy rights
Right to notice- right to receive the privacy notice upon registration and how to access their info
Right to access- right to inspect and receive copies of their medical record
Right to amend- right to request a change in their medical info
Right to accounting disclosures
Right to request restrictions
Right to request confidential comm
Right to file a complaint
How much phi can hospital share w police
The hospital must make sure that the shared information is the minimum necessary for the lawful purpose. Cannot be more
EPHI
Electronic protected health information
3 General security requirements
CIA
Confidentiality- patient info is not made available or disclosed without proper authorization
Integrity- patient info has not been altered or destroyed
Availability- patient info is accessible and usable upon demand by an authorized person
Security safeguards that must be met
Three
PAT
Physical- ensuring the physical protection of info systems including the protection of buildings/equipment from hazards and intruders
Administrative- developing info security programs designed to protect ephi and manage the use of the phi
Technical- identifying tech to be utilized and ensuring procedures are in place to protect phi and control access