Privacy, Security, Fraud Flashcards
American Recovery and Reinvestment Act (ARRA)
a 2009 act that made substantive change to HIPPAA’s privacy and security regulations
breach
any unauthorized acquisition, access, use, or disclosure of personal health info that compromises the security of such info
business associates
indivs and/or organizations that provide certain functions, activities, or services on behalf of covered entities that involve access to disclosure of protected health info
confidentiality
act of holding info in confidence, not to be released to unauthorized indivs
covered entities
health care providers and clearinghouses that transmit HIPAA transactions electronically, and must comply with HIPAA standards and rules
Criminal Health Care Fraud Statute
section of the US code that prohibits fraud against any health care benefit program
de-identify
to remove from health care transactions all info that identifies patients
Federal anti-kickback law
prohibits knowingly and willfully receiving or paying anything of value to influence the referral of federal health care program business
federal false claims act
law that allows for indivs to bring civil actions on behalf of US gov for false claims made to the federal gov, under a provision of the law called qui tam, to bring an action for the king and for oneself
Health Information Technology for Economic and Clinical Health Act (HITECH)
section of American Recovery and Reinvestment Act (ARRA) that strengthened certain HIPAA privacy and security provisions
Health Insurance Portability and Accountability Act (HIPAA) of 1996
protect privacy and other health care rights for patients. The act helps workers keep continuous health insurance coverage for themselves and their dependents when they change jobs, protects confidential med info from unauthorized disclosure or use, and helps curb the rising cost of fraud and abuse
limited data set
protected health info from which certain patient identifiers have been removed
notice of privacy practices
a list provided by all covered entities that demonstrates adherence to HIPAAs privacy practice rules
permission
reason under HIPAA for disclosing patient info
privacy
freedom from unauthorized intrusion