HIPPA

PHI (protected health information)

-any information that can be used to identify an individual or any information that can be used with other available information to identify an individual. -about a person's health condition or care, including billing and payment information. -information may be in written format, may be electronic, or may be spoken. -can be used to disclose for: treatment, payment, health operations, law enforcement (gov programs like Medicare, victims of abuse)

Health Insurance Portability and Accountability Act

A federal law that regulates the privacy and security of health information. The law focuses on maintaining confidentiality, respecting a patient's rights to privacy, and protecting patient information. HIPAA does not require the patient's consent to allow healthcare providers and plans to use health information for ordinary treatment purposes.

PHI cannot be used for

Marketing Research (PHI can only be used for search if authorization is waived by an Institutional Review Board) If you are unsure whether or not PHI can be disclosed, *ask the patient to sign an authorization form*

Personal Representatives

a person who is able to inspect and receive a copy of your Protected Health Information: parent of a child, a person who has health care power of attorney for you, etc.

Examples of PHI

census sheet billing info medical records mail identifying patient rooms info in computer systems conversations related to pt. care and treatment photographs

The HIPPA Security Rule

controls how we maintain the privacy of electronic healthcare information. The HIPAA Security Rule contains rules for user accounts, computer passwords and network security.

Do Not Announce

excluding information regarding a patient's presence at LVHN from the public information patient directory, either by request of the patient or by their medical condition. The patient's presence will not be acknowledged to the public, including family and friends. Mail, flowers and visitors will all be refused.

The "Health Information Privacy Notice"

given to all patients, summarizes how protected health information is used and disclosed.

The Privacy Rule

gives patients and personal representatives rights concerning their health information and outlines the requirements for the use and disclosure of protected health information (PHI).

Employees should NOT:

• Disclose, discuss or release patient information to anyone at or outside work EXCEPT to carry out regular duties assigned. The fact that a patient is here at LVHN is confidential. • Share or disclose any computer systems username or password to anyone. • Seek or use confidential information for personal gain or pass it on to any person outside LVHN, including family and friends, or even to other employees who do not need to know such information to carry out their duties. • Remove confidential data from the facility.

The authorization form must include:

• Who may use or disclose the protected health information • A description of the information to be used or disclosed • To whom the PHI may be disclosed • The purpose of the use or disclosure