HIPAA Flashcards
Who and What is covered by the Hipaa rule?
- **“___”
- Health care plans, providers, and clearing houses.
- Billing services and business associates covered indirectly.
- **___
- Patient health information used or disclosed in any form–oral, paper, electronic, or recorded (ex: research)
- PHI also includes demographic information.
- **“Covered Entity”
* **Protected Health Information (PHI)
Purposes of HIPAA:
- Imposes new restrictions on the use and disclosure of ___
- Gives patients greater access to as well as protection and control over how their medical records are used
-protected health information (PHI)
Rules for use and disclosure of PHI:
- Use of PHI
- Information shared, examined, applied, analyzed by covered entity.
- ___
- Information released, transferred, or accessed by anyone outside the covered entity.
*Disclosed
HIPAA uses and disclosures of PHI:
- **___ = -Treatment, payment, and healthcare operations
- Authorization of pt, or disclosure to pt -Incidental uses
- Transfer of records upon sale or merger of covered entity
- **___
- Authorized by the ___
- Department of Human Health Services (HHS) for investigations or compliance.
**Permitted
**Required
individual
Authorization forms:
●Description of ___ to be disclosed.
●Who and for what purpose is the PHI being used or disclosed.
●Will the disclosure result in ___ for the covered entity.
●Patient ___ to revoke the authorization.
●Date. Has to be an ??
●Patient signature.
- PHI
- financial gain
- right
- end date
***___ Not Required
●Facility patient ___.
●Inform appropriate agencies during ___.
●Public health activities related to disease control or prevention.
●Report victims of abuse or neglect.
●Health oversight activities.
●Coroners, medical examiners, funeral directors.
●Tissue organ donations.
●Avert serious threat to health and safety.
●Research, public health, or healthcare operations as a limited data set.
- **Written Authorization
- directory
- disasters
HIPAA
●___ must develop policy to assure that the LEAST amount of information to get the job done is shared.
●___ notice
●Given the ___ of service or ASAP after an ___.
●Given in print and posted at site of service.
●Notice of PHI policy changes.
- Covered entities
- Privacy
- first date
- emergency
Patient Rights: -Covered entity must ensure that patients can exercise their rights over their ___.
- Receive ___ at first delivery of service.
- Have PHI communicated via alternate means/locations to protect ?
- Inspect, amend, or correct PHI and obtain copies.
- Patients can Request history of NON-routine disclosures for ___ prior to the request.
- Contact designated persons regarding privacy concerns or breaches both within the facility and at Human Health Services.
- PHI
- privacy notice
- confidentiality
- 6 years
Rights of Minors:
- ___ have access and control over PHI with some exceptions.
- ___ overrides control (ex: abuse or neglected)
- ___ testing of minors.
- Abuse
- ___ agreed to give control over to minor.
- Parents
- State
- HIV
- Parents
Administrative Compliance: -Allow patients to see and copy their ___
- Develop a notice of ___ document.
- Develop policies and safeguards for PHI to limit ___.
- Institute a ___ process.
- File and resolve ___.
- Contracts with business partners comply with the ___ (ex: University not a covered entity, need affiliation agreement w/G-town hospital)
- PHI
- privacy practices document
- incidental exposures
- complaints
- formal complaints
- privacy rule
Administrative Compliance continued:
●Requires a full or part time designated official responsible for implementing the programs.
●Contact person or office responsible for receiving ___.
complaints
***___:
●Civil penalty.
●Criminal penalty.
●Department of Human Health Services is mandated to give your organization advice, technical assistance and help you work out problems if there is an inadvertent mistake.
***Violations
___ helped to enforce the HIPAA rules
High Tech Act
- Make sure to shred ___ at the site, do not remove from site (same goes with charts).
- Make sure there are no patient identifiers on the ___ (no pt names).
OR schedule
care plan
