Category:

HIPAA

Learning Objectives

1. Describe how the HIPAA Privacy Rule protects individuals’ medical records and other personal health information.
2. Discuss various situations where incidental uses and disclosures of protected health information are permitted under the Privacy Rule.
3. Distinguish between activities for treatment or health care operations versus marketing activities.
4. Explain the application of HIPAA Privacy Rule in research uses and disclosures of protected health information.

Course Contents

1. Protecting the Privacy of Patient’s Health Information

  • Overview
  • Patient Protections
  • Health Plans and Providers
  • Outreach and Enforcement

2. Summary of the HIPAA Privacy Rule

  • Introduction
  • Statutory & Regulatory Background
  • Who Is Covered by The Privacy Rule
  • Definitions
  • Business Associates
  • What Information Is Protected
  • General Principle for Uses and Disclosures
  • Permitted Uses and Disclosures
  • Authorized Uses and Disclosures
  • Limiting Uses and Disclosures to the Minimum Necessary
  • Notice and Other Individual Rights
  • Administrative Requirements
  • Organizational Options
  • Other Provisions: Personal Representatives and Minors’ Personal Representatives
  • State Law
  • Enforcement and Penalties for Noncompliance
  • Compliance Dates
  • Copies of the Rule & Related Materials
  • Incidental Uses and Disclosures
  • Minimum Necessary
  • Personal Representatives
  • Business Associates
  • Uses and Disclosures for Treatment, Payment, and Health Care Operations..
  • Marketing
  • Disclosures For Public Health Activities
  • Research
  • Disclosures For Workers’ Compensation Purposes
  • Notice of Privacy Practice For Protected Health Information
  • Restrictions on Government Access to Health Information

3. Implementation of Administrative Simplification Requirements by HHS.

  • Overview
  • Implementation Plan
  • Standards Adoption Process
  • Public and Private Sector Input into the Standards Development Process
  • Implementation Schedule
  • Understanding CMS’s Compliance Policy
  • What Is a Contingency Plan?
  • Steps For Contingency Planning
  • Health Plan Responsibilities
  • Review Your Good Faith Efforts to Comply

4. Security Standard

  • General Approach
  • Specific Requirements
  • Guidance on Compliance with HIPAA Transactions and Code Sets
  • After the October 16, 2003 ImplementationDeadline
  • Enforcement Approach
  • Working Toward Compliance
  • HIPAA Administrative Simplification Compliance Act (ASCA)
  • Electronic Transaction Standards
  • Code Set Standards
  • What Is a Code Set
  • What Code Sets Have Been Adopted as HIPAA Standards?

5. FAQ About HIPAA

  • HIPAA: In General
  • Privacy Rule: General Topics
  • Protected Health Information
  • Preemption of State Law
  • Covered Entities
  • Compliance Dates
  • Minimum Necessary
  • Business Associates
  • Treatment/Payment/Health Care Operations
  • Right to Access Medical Records
  • Complaints
  • Right to an Accounting of Disclosures
  • Incidental Uses and Disclosures
  • Public Health Uses and Disclosures
  • Facility Directories
  • Disclosure to Family and Friends
  • Disclosures Required by Law
  • Disclosures for Rule Enforcement
  • Disclosures for Law Enforcement Purposes
  • Authorizations
  • Marketing Uses and Disclosures
  • Workers’ Compensation Disclosures
  • Notice of Privacy Practices
  • Personal Reps/Parents and Minors
  • Limited Data Set
  • Research Uses and Disclosures
  • Transition Provision

Appendix

  1. NOTICE OF PRIVACY PRACTICES
  2. Sample Business Associate Contract
  3. How to File a Health Information Privacy Complaint With the Office For Civil Rights