This module covers the following:
Chapter 10 introduces the Health Insurance Portability and Accountability
Act (HIPAA) Privacy Rule. It presents the history, purpose, and goals of the rule along with a detailed discussion of how it compares to other laws and standards that protect patient information. Central to this chapter are who and what the Privacy Rule addresses, with discussion about covered entities, business associates, and the elements that comprise protected health information. The key documents, Notice of Privacy Practices, consent, and authorization are detailed, as are commercial uses and disclosures of protected health information and the requirements surrounding the activities of marketing, fundraising and sale of information. The chapter closes with a focus on the minimum necessary requirements.
Chapter 11 continues the discussion of the requirements of the HIPAA Privacy Rule. It focuses on individual rights, breaches and breach notification, requirements pertaining to researchers using patient information, preemption, (the interplay between federal and state law), and administrative requirements imposed on those who are subject to the HIPAA Privacy Rule.
Course Objectives:
A. Identify laws and regulations applicable to healthcare.
C. Analyze privacy, security and confidentiality policies and procedures for internal and external use and exchange of health information.
E. Develop educational programs for employees in privacy, security and confidentiality.
F. Create policies and procedures to manage access and disclosure of personal health information.
H. Appraise current laws and standards related to health information initiatives.
Module Learning Objectives:
Identify the purpose and goals of the HIPAA Privacy Rule
Evaluate when written authorization is and is not required for uses and disclosures
Examine the restrictions that the HIPAA Privacy Rule places on the use of protected health information for commercial purposes
Distinguish situations when the minimum necessary requirement does and does not apply
Determine whether an unauthorized use or disclosure constitutes a breach, and apply the breach notification process when applicable
Examine the restrictions that the HIPAA Privacy Rule places on the use of protected health information for research
