Legal

Question 1

HIPPA

Answer 1

Health Insurance Portability and Accountability Act

Question 2

Goal of the Security Rule

Answer 2

Protect privacy of people while allowing entities to adopt new technologies and improve patient care

Question 3

Minimum Necessary Rule

Answer 3

Limit access to personal health info without sacrificing the quality of health care

Question 4

Safeguards - 3 categories

Answer 4

• Administrative- Policies, processes, documentation process
• Technical- Electronic, hardware, software
• Physical- video, locks, server location

Question 5

Administrative Safeguard

Answer 5

• Security management process
• Security personnel
• Info access mgt
• Workforce training and management
• Evaluation*

Question 6

Physical Safeguards

Answer 6

• Facility access and control

* Workstation and device security

Question 7

Technical Safeguards

Answer 7

• access control
• audit control
• Integrity control- policy/procedure
• transmission security- unauthorized access over electronic network

Question 8

HIPPA privacy and security

Answer 8

*Coaches have 100% responsibility to follow all state and federal laws governing security, privacy and confidentiality of e-PHI (electronic protected health information)
*All client files encrypted and protected
*On a dedicated computer we only have access to
*Client info safe and documented for 6 years unless state, federal jurisdiction has other requirements
Office locked
file cabinet locked
coding of client PHI
Must have proof of HIPPA training
Posting of privacy policy to each client
crisscross shredder
Process of documentation for release of client info to authorized persons
vendors need to be hippa compliant