HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPPA)

What does the HIPAA federal law require?

-special training for health-care personnel on policies and procedures regarding protected health information

What are the Privacy Regulations of HIPAA required by clinical sites to create a fair set of practices?

1. inform people about how their information is used and disclosed 2. ensure that people have access to their own information 3. maintain administrative and physical safeguards to protected health information (PHI)

What does PHI (protected health information) consist of?

ANY information that relates to the past, present, OR future physical OR mental health OR the condition of an individual

T or F: With the growth of electronic systems in healthcare, it is crucial to degrade privacy and confidentiality.

False; IMPROVE privacy and confidentiality

What does HIPAA stand for?

H- health I- insurance P- portability and A- accountability A- act

What is privacy?

It is the right of an individual to be left alone, including freedom from intrusion into one's private affairs and includes the right to maintain control over certain personal information.

What does PHI stand for?

P- protected H- health I- information

The second Privacy Regulation required by clinical sites is: 2. ensure that people have ____________ to their own information

access

Clinical sites have __________________ that hold their business associates and their agents to the same conditions of privacy and security.

agreements

HIPAA was the ___________ federal law.

first

The first Privacy Regulation required by clinical sites is: 1. __________ people about how their information is used and disclosed

inform

Since there is a growth of electronic systems to aid medical diagnostics, claims processing, and research, it is crucial to improve _____________ and ____________________.

privacy; confidentiality

When a breach occurs, _______________ steps must be taken to make sure a business associate does not violate the agreement.

reasonable

The third Privacy Regulation required by clinical sites is: 3. maintain administrative and physical _____________________ to protected health information

safeguards

Violators of HIPAA will be subjected to ______________ and penalties.

sanctions

An unintentional violation is as to _____________ private practices.

sloppy

In healthcare, who is in charge or maintains confidentiality?

the ethical behavior of healthcare workers

What is an example of an unintentional violation?

A hospital employee noticed the name of an acquaintance on a discharge list. She saw him a week later at a game and asked him if he was feeling better. While this would probably not generate a formal complaint, she would have known better than to inquire about his medical condition, especially in a public place.

What did HIPAA, the first federal law, establish?

HIPAA established privacy standards that define and limit the circumstances in which an individual's personal health information may be used or disclosed by others

T or F: There is a growth of electronic systems aiding medical diagnostics, claims processing, and research.

True

Name sanction and penalties of violating HIPAA:

1. violations are subject to civil liability 2. civil money penalties are $100 per violation, up to $25,000 per year 3. criminal penalties for certain actions could include up to 10 years in jail 4. civil penalties are imposed for unintentional violations

_____________________ means that information is not made available or disclosed to unauthorized individuals, entities, or processes.

Confidentiality

T or F: Privacy means that information is not made available or disclosed to unauthorized individuals, entities, or processes.

FALSE; Confidentiality means that information is not made available or disclosed to unauthorized individuals, entities, or processes.

T or F: HIPAA provides patients with less control over how their PHI is used and disclosed.

FALSE; HIPAA provides patients with MORE control over how their personal health information is used and disclosed.

T or F: Confidentiality is the right of an individual to be left alone, including freedom from intrusion into one's private affairs and includes the right to maintain control over certain personal information.

FALSE; PRIVACY is the right of an individual to be left alone, including freedom from intrusion into one's private affairs and includes the right to maintain control over certain personal information.

What does confidentiality mean?

It means that information is not made available or disclosed to unauthorized individuals, entities, or processes.

_____________ is the right of an individual to be left alone, including freedom from intrusion into one's private affairs and includes the right to maintain control over certain personal information.

Privacy

T or F: HIPAA is the first federal law establishing privacy standards that define and limit the circumstances in which an individual's personal health information may be used or disclosed by others.

TRUE

Are individuals personally accountable for compliance with HIPAA?

YES

Is HIPAA an important concept to understand as a student?

Yes; HIPAA pertains and applies to my position and responsibilities as a student

As a student, the Privacy Regulations of HIPAA require __________ sites to create a fair set of practices.

clinical

In healthcare, __________________________ is maintained through the ethical behavior of healthcare workers so that in individual's health information is not disclosed unless called for by law, policy, or with the individual's consent or authorization.

confidentiality

HIPAA provides patients with more __________ over how their personal health information is used and disclosed.

control

HIPPA is a ___________ law that requires special training for health- care personnel on policies and procedures regarding protected health information.

federal

HIPAA is a ___________ law and individuals are ______________ accountable for compliance.

federal; personally

An individual's health information is not disclosed unless called for by ________, policy, or with the individual's ____________ or authorization.

law; consent

PHI is any information that relates to the past, present, or future ___________ or mental health or the _________________ of an individual.

physical; condition

If a business associate _______________ the agreement, reasonable steps must be taken to make sure a breach does not occur again.

violates