HIPPA Flashcards
HIPAA stands for what?
Health Insurance Portability and Accountability Act
what is the intent HIPAA?
To prevent loss of insurance when you change jobs.
To ensure the privacy of PHI (Protected Health Information).
What are the PATIENT’S RIGHTS
- The ability to make informed choices when seeking care.
- The ability to find out how PHI is used.
- To limit the release of PHI to the minimum necessary.
- To provide the patients the right to examine and obtain copies of their health records & request corrections.
What is protected?
Anything to do with your health: Blood work Diagnoses EEGs EKGs Any and all test results Etc.
What are INDIVIDUALLY IDENTIFIABLE HEALTH INFORMATION
This is a subset of health information: Name Address Telephone number Email Medical record number SSN
What are the EMPLOYER’S RESPONSIBILITIES
- Notify patients about their privacy rights and how PHI is used.
- Adopt & implement privacy procedures.
- Train employees in privacy procedures.
- Designate an individual to be responsible.
What entities are covered?
A health care provider that conducts certain transactions in an electronic format or uses a clearing house.
what transactions are covered?
Electronic health care claims.
Electronic remittance & payment advice.
Checking the status of a claim.
Referral certification & authorization.
What electronic forms fall under HIPAA ?
Internet Extranet Leased lines Dial-up lines Private networks Magnetic tape, disk or CD media
What are AUTHORIZATION RULES
Written authorization You must keep a copy Patient must get a copy Authorization may be revoked at any time Date Purpose of disclosure Expiration date Signature/date When faxing, the recipient must be at the fax machine at the other end. Call to ensure this.
MRLSHC CONFIDENTIALITY requires what?
we require a new authorization form each semester.
Signed release form to send information.
Signed release form to receive information.
Information exchange release form.
School site visit release form.
Only department secretaries, chair, and clinic coordinator may remove faxes from the machine.
How does MRLSHC send docs?
We seldom transmit by email, only by fax and US mail.
When we bill we do so directly by U.S. mail.
We NEVER exchange info, in any format, without written permission to do so.
What is the notice of privacy practices?
Patients must receive a letter stating how you protect their PHI and maintain confidentiality.
They must sign a form stating that they received this information.