Hipaa Rules Are Divided Into 2 Sections

Health Insurance Portability and Accountability Act 1996 August 21,1996

Title I: Health Care Portability Title II: Preventing Healthcare Fraud and Abuse; Administrative Simplification; Medical liability Form

*Portability deals with protecting healthcare coverage for employees who change jobs *Reduces risk that individuals will lose their existing healthcare coverage who are changing jobs. *Allows workers to purchase insurance on their own if coverage is lost under their employer.

*HIPAA standards for privacy of Individual Identifiable Health Informantion. *Protection, use, and disclosure IPA protected health information

when it moves within an organization: *sharing *employing *applying *Utilizing *examining *analyzing

when it is transmitted: *release *transfer *provision of access to *divulging in any manner

for sharing: *treatment-information in order to provide care for patient *payment-information in order to receive payment for treatment provided *operations-information to conduct normal business activities,such as quality improvement

*medical researchers *emergencies *funeral directors/coroners *desater relief services *law inforcement *correctional institutions *abuse and neglect *organ and tissue donation centers *work related conditions tat may affect employee health *judicial/administrative proceedings at patient request or subpoena

1. Notice of Privacy Practice 2. authorization- disclosure of patient information for purposes other than TPO Treatment,Payment,Healthcare Operation

1.Must specify the information to be disclosed 2.Must identify the receipient of the information 3.There must be an Expiration date and revocation of authorization option 4.Individuals signature and date

1.Privacy 2.security 3.EDI Electronic data interchange

*computer networks *the internet *disks and other storage media extranets -chart security -reception area -fax security -MA clinical station security -all patient information must be kept confidential -keep records out of sight -do not discuss the case with anyone outside the medical office

*Financial penalties for failure to comply *Section 1176 of the Act establishes civil monitary penalty for violation. -100.00 per occurance, 25,000. max a year *Section 1777 of Act establishes penalties for knowing misuse of the unique health identifiers and individualy identifiablle health information -50,000 and/or imprisonment of not more than 1 year -misuse "under false pretenses" 100,000 or not more than 5 years imprisonment -misuse with intent to sell, transfer, or use information for commercial 250,000 or 10 years imprisonment