HIPAA
Protected Health Information
What is PHI?
Putting PHI away in a drawer, locked office, etc.
What is your commitment to protecting PHI?
Release of information
What is ROI?
Having a DPOA means HMC can give any information about a patient to the DPOA freely.
What is false?
14 yrs old
What is the age proxy access starts?
Patients name, DOB, treatment dates, diagnosis, vitals signs.
What is Individually Identifiable Health Information IIHI
Not gossiping, Minimum Necessary, review release of information /contact information prior to speaking to a patient/family member.
What is HMC's "commitment" to Patient Privacy?
In general, this document is needed when a patient requests their medical records.
A document that names someone to make decisions during a time when you are incapacitated.
What is DPOA?
Allows parents, guardians, or caregivers access to patient information on the patient portal.
What is Proxy Access?
PHI placed in a safe place for later disposal. Not leaving PHI unattended. Do not save a stack of papers or box of PHI for disposal at the end of the week, this not ok.
What are shred bins at HMC?
I am required to report a HIPAA violations/breach to my supervisor, the privacy officer and put an event in Compliactrics.
What is HMC's employee's commitment to reporting HIPAA events?
The law that was created to build on HIPAA and patients' rights to have more access to their medical record.
What is the CURES Act?
What are the two types of POA's?
(In Kansas, this document is called a "power of attorney for health care decisions.")
Adolescent patient that the provider deems able to make their own health care decisions.
What is a mature minor?
Verbal, electronic and paper
What are the three types of PHI we release to patients?
HMC wants the community we serve to know we are committed to keeping patient information safe and not sharing with others.
What is HMC employees' commitment to HIPAA?
Treatment, Payment and Operations
What are the 3 reasons we do not need a release of information to share PHI.
A power of attorney is “durable,” it means your agent's authority to act on your behalf continues even if you become incapacitated.
What is the definition of "durable"
Schools do not need a ROI for immunization records to be sent to them.
What is true?
They develop, manage, and implement processes to ensure the organizations (HMC’s) compliance with federal/state HIPAA regulations and guidelines especially access to and use of PHI.
What is the role of the HIPAA Privacy officer?
I work at HMC and receive care here; I see my provider in the hall? Why can’t I ask them a medical question about me or my family?
What is not an employee benefit?
A document that tells the patient how HMC uses and shares their health information and their rights under HIPAA.
What is a Notice of Privacy Practice?
Takes place when a person is incapacitated and not able to make decisions for themselves.
(If the person is still making medical decisions for themselves, the DPOA is not in effect, and you cannot share information with them unless on communication form.)
When does the DPOA take affect for a patient?
Divorced parents have equal rights to the minor child’s records, regardless of if the parent doesn’t add the ex-spouse to the ROI. Unless the court has terminated parental rights and that document needs in the pt chart.
What is true?