HIPAA Lesson 2 Flashcards
CE is an acronym for?
Covered Entity
Name the three types of CE.
- Healthcare Providers
- Health Plans
- Healthcare Clearinghouses
A _________ is any person or organization that diagnoses or treats a patient.
Healthcare Provider
A ________ is the covered entity that pays the cost of medical care.
Health Plan
A company that owns, administers, and maintains a health plan for fewer than _____ employees isn’t a CE.
50
An entity that translates nonstandard information into a standard format.
Healthcare Clearinghouses
List two other names used for clearinghouses.
- Value-added Networks
2. Switches - Works like a bus station.
What questions should be asked to figure out if an organization is a CE?
- Does the person, business, or agency furnish, bill for, or receive payment for healthcare in the normal course of business? If Yes, then go to the next question.
- Is it possible to transmit the information electronically? If Yes, go to the next question.
- Then the organization is a CE.
Name the six agreements and relationships available for healthcare entities.
- Affiliated Covered Entity (ACE)
- Business Associate Contract/Agreement (BAA)
- Chain of Trust Agreement
- Data Use Agreement
- Organized Healthcare Arrangement (OHCA)
- Trading Partner Agreement
What two forms of organization relationships does the Administrative Simplification allow to help reduce costs to organizations.
- ACE
2. OHCA
Legally separate entities that are under common ownership or control may designate themselves an __________.
Affiliated Covered Entity (ACE)
An ACE has two responsibilities.
- It must state that it will operate as an ACE.
2. It must comply with all HIPAA rqmts when it creates, receive, maintains, or transmits PHI.
Affiliated entities may have ___________in charge of HIPAA compliance.
One person or team
Multiple healthcare providers (like a hospital and a group of physicians) that typically provide healthcare to a common set of patients may designate themselves as a ____________.
Organized Healthcare Arrangement (OHCA)
In an OHCA, there’s a relationship between legally _______ organizations.
Separate
The difference between an OHCA and an ACE is that OHCA doesn’t have _________ owership.
Common
OHCA’s can disclose PHI among themselves as needed, and allows _________ of compliance activities.
Centralization and Sharing
Members of OHCA must _________ develop privacy policies, procedures, and practices.
Jointly
For a CE to be a ________ entity, one part of the organization must provide healthcare, pay for healthcare, or act as a healthcare clearinghouse, while the rest of the organization must not provide any of these services.
Hybrid
_______ are people or entities who aren’t employees of a CE, and perform certain activities on the CE’s behalf that use PHI.
Business Associates (BA)
One CE can be a ____________ of another CE.
BA
BA’s can use ____________ only to help providers and health plans carry out their healthcare functions.
PHI
Disclosures to BA’s must be the ____________ to perform the services required.
Minimum Necessary
List eight types of services that BA’s perform.
- Legal
- Actuarial
- Accounting
- Consulting
- Data Aggregation
- Management
- Administrative
- Accreditation
Entities that pass along or transport PHI, but usually don’t have access to it. They don’t require PHI to perform their work.
Conduits
Give examples of conduits.
USPS, FedEx, UPS, Internet Service Providers, AT&T, Comcast
_________ are firms that process consumer-related financial transactions and not a BA.
Financial Institutions
What are the clues that you could be a BA?
- You perform services on behalf of a CE (health plan, health provider, healthcare clearinghouse.
- You are not a member of the CE’s workforce.
- The services you proved involve the use of IIHI (PHI).
- You aren’t a bank.
- You aren’t a conduit, such as UPS/Internet Provider.
___________ perform clinical, medical, and health services and exchange electronic transactions with each other rather than going through a clearinghouse.
Trading Partners