HIPAA. The acronym alone is enough to strike fear in the hearts of those in the medical industry and beyond. And it's no wonder...HIPAA violation settlements can cost an organization millions. In this course, we'll give you some background on the law. We'll also talk about who must comply with HIPAA rules, and if the rules apply to you, what type of training you'll need.
HIPAA: 2. What is HITECH?
In 2009, the United States Congress passed the Health Information Technology for Economic and Clinical Health Act, or HITECH. This sweeping act has implications for nearly every health care provider and organization in the medical industry.
HIPAA: 3. HITECH - Understanding Business Associates
HITECH, which stands for the Health Information Technology for Economic and Clinical Health Act, was part of 2009 legislation designed to encourage the use of electronic health recording systems nationwide. As part of that initiative, the act further refined and strengthened HIPAA, more clearly defining the roles and responsibilities of the businesses associates of covered entities. As you might recall, covered entities are health care providers and companies that are required to adhere to HIPAA rules. Under HITECH, the offices of business associates also need to be HIPAA compliant.
HIPAA: 4. What is Protected Health Information?
Nearly every aspect of the Health Insurance Portability and Accountability Act, or HIPAA, involves protected health information, or PHI. Before diving into the HIPAA rules, it's very important that all employees understand what constitutes PHI.
HIPAA: 5. The Privacy Rule - Authorizations
As you likely already know, the Health Insurance Portability and Accountability Act, or HIPAA, is a federal law designed to protect and safeguard both digital and printed patient health information. There are two main components of the act: The Privacy Rule and The Security Rule. This course focuses on the authorizations portion of the Privacy Rule, providing an in-depth summary that will suffice for the average employee. It needs to be noted, however, that this course doesn't cover the entire rule.
HIPAA: 6. The Privacy Rule - Disclosures
As you likely already know, the Health Insurance Portability and Accountability Act, or HIPAA, is a federal law designed to protect and safeguard both digital and printed patient health information. There are two main components of the act: The Privacy Rule and The Security Rule. This course focuses on the disclosures portion of the Privacy Rule, providing an in-depth summary that will suffice for the average employee. It needs to be noted, however, that this course doesn't cover the entire rule.
HIPAA: 7. The Security Rule
As you likely already know, the Health Insurance Portability and Accountability Act, or HIPAA, is a federal law designed to protect and safeguard both digital and printed patient health information. There are two main components of the act: The Privacy Rule and The Security Rule. This course focuses on the Security Rule, providing an in-depth summary that will suffice for the average employee. It needs to be noted, however, that this course doesn't cover the entire rule.
Fully understanding the Health Insurance Portability and Accountability Act is an exercise in putting rules into practice. In this course, you're going to learn what happens when an organization doesn't abide by the HIPAA Security or Privacy Rules. The HIPAA Enforcement Rule outlines enforcement responsibilities and processes. Though this isn't required knowledge for most employees, managers and supervisors can benefit from knowing what will happen in the case of a HIPAA violation complaint.
The goal of the Health Insurance Portability and Accountability Act, or HIPAA, is to prevent the unauthorized use or disclosure of protected health information (PHI). Under the HIPAA Privacy Rule, any impermissible release of this protected information is considered a data "breach." As you continue in this course, you'll learn what constitutes a breach and, as an employee, what you must do to prevent a breach.
As a quick review, HIPAA passed through Congress in 1996 as a broad attempt at health care reform. The act's main objective was to maintain the security and confidentiality of patient health information. In 2009, Congress amended and strengthened HIPAA through the Health Information Technology for Economic and Clinic Health Act, or the HITECH Act. It's the HITECH Act that established the penalty structure for HIPAA violations.
HIPAA: 11. General Disclosures - FAQ
The Health Insurance Portability and Accountability Act is designed to protect patient health information, so a great deal of the act's content is dedicated to outlining how and when covered entities can disclose protected health information. This program covers frequently asked questions regarding disclosure, so you can be fully prepared.
HIPAA: 12. Marketing - FAQ
The Health Insurance Portability and Accountability Act greatly impacts how covered entities can market their products and services to patients. Marketing is defined as communication about a product or service that encourages the purchase or use of that product or service. Marketing remains a very tricky area when it comes to HIPAA compliance and it's important that all covered entities talk with a legal representative before sharing protected health information, or PHI, for any marketing efforts. This program covers frequently asked marketing questions.
HIPAA: 13. Protection Against Violations - Risk Analysis
The Health Insurance Portability and Accountability Act is a lengthy and arguably cumbersome maze of rules and requirements. Because it's your organization's job to stay compliant, it may seem like a daunting task. Of course, your first step is to fully train all employees on both the HIPAA Privacy and the HIPAA Security rules. Beyond that, it's the organization's job to conduct a formal risk analysis and to ensure that the necessary information safeguards are in place. These steps will greatly limit the risk of a breach. And, if a breach occurs, these processes can limit any fines imposed by the Office of Civil Rights- the enforcement arm of the U.S. Department of Health and Human Services, or HHS. In this course, we're going to talk through HHS recommendations regarding risk analysis.
HIPAA: 14. Protection Against Violations - Safeguards
The Health Insurance Portability and Accountability Act is a lengthy and arguably cumbersome maze of rules and requirements. Because it's your organization's job to stay compliant, it may seem like a daunting task. Of course, your first step is to fully train all employees on both the HIPAA Privacy and the HIPAA Security rules. Beyond that, it's the organization's job to conduct a formal risk analysis and to ensure that the necessary information safeguards are in place. These steps: the risk analysis and the administrative, technical and physical safeguards, will greatly limit the risk of a breach. And, if a breach occurs, can limit or mitigate any fines imposed by the Office of Civil Rights- the enforcement arm of the U.S. Department of Health and Human Services, or HHS. In this course, we're going to talk through HHS recommendations regarding safeguards.
HIPAA: 15. Quick Learn for Employees
The Health Insurance Portability and Accountability Act, or HIPAA, is a big topic. So big, in fact, that hours of training are dedicated to ensuring compliance. But what does the average health care worker or volunteer need to know?
HIPAA: 16. Consumer Rights
The Health Insurance Portability and Accountability Act is designed to protect patients. In addition to learning all about the rules and regulations regarding these protections, it's also important to talk through consumer's rights. This course will teach you what consumers expect, and are entitled to, from your HIPAA compliance efforts.
HIPAA: 17. Disclosure to Family and Friends
The Health Insurance Portability and Accountability Act is designed to protect patient health information, so a great deal of the act's content is dedicated to outlining how and when covered entities can disclose protected health information, or PHI. As you may have already learned, the HIPAA Privacy Rule outlines six different permitted uses and disclosures. You can learn more about those in the Privacy Rule training. The goal of this program is to address concerns regarding disclosing PHI to family and friends. This is one of the more complex HIPAA topics because the situations are so varied.
HIPAA: 18. For Emergency Responders
As an emergency responder, you're engaging with patients during some of the most vulnerable times in their lives. Your job is to comfort, treat, and transport while protecting yourself and those around you. The first question typically asked by emergency responders is this: "Am I required to be HIPAA compliant?" Most of the time, the answer is "yes." Any health care providers that charge for services, including EMS agencies, fire departments, or rescue squads, are considered covered entities under HIPAA.
One of the most significant changes in the health care landscape is the ability to use genetic information to determine a patient's risk of developing certain conditions or illness. This amazing technological advancement is a tool for people all over the world. The Genetic Information Nondiscrimination Act (GINA), passed in 2008, is a federal law seeking to ensure that this incredible technology will benefit us, not create additional hardships. The law protects people from discrimination based on their genetic information. In short, GINA prohibits employers and health insurers from misusing genetic health information.