HIPAA

Course overview

Objectives Define HIPAA and PHI Describe how HIPAA has affected and improved patient care Content History of HIPAA What is HIPAA Who created it and when When was it signed into law Privacy Rules November 1999 April 2005 Safeguards Administrative Physical Technical Enforcement Rule HITECH 2009 and Breach Notification Rule HIPAA Security Rule HIPAA Compliance Audit Program Final Omnibus Rule of 2013 First HIPAA Settlement with a business associate 21st Century Cures Act First Settlement for Tardy Breach Notifications First HIPAA Settlement for Phishing Attack First HIPAA settlement with a wireless health provider Largest HIPAA Penalty issued October 2018 Covered Entities Healthcare providers Health plans Healthcare clearinghouses Business associates Permitted uses and disclosures 12 national priority purposes Self Audits and Remediation Plans Policies Procedures Employee Training Incident management Business associate management Seven elements of an effective compliance program HIPAA Violation Common causes Categories Use and Disclose Improper security safeguards The minimum necessary rule Access controls Notice of privacy practices Consequences Civil violations Unknowingly Reasonable cause Willful neglect but corrected Willful neglect but not corrected Criminal violations Knowingly Under false pretenses Intent to sell