Hip Hip ah.....
Strictly Jeopardy
Q and A
What we need to know
More Q & A
100
3 action steps you can take to keep patient health information confidential.
1. Make sure papers, documents, and reports containing client information are shredded or destroyed in some way. 2. If fax and copy machines are used to send or copy patient information, make sure they are located away from public areas. 3. Always consider where you are when talking about confidential information. 4. Whether you are talking to a client/family or with coworkers, try to keep your conversations from being overheard. 5. Keep confidential client information out of public areas such as waiting rooms, conference rooms, receptionist desk or on white boards viewable by the public. 6. Don't assume the person with the client knows all the information. 7. Be cautious when using a cell phone and talking about patient information. 8. Keep records safe and protected regardless of where they are kept.
100
Obtained before releasing Protected Health Information for purposes other than treatment, payment, and operations.
What is a written patient authorization.
100
Can we use sign in sheets?
Yes, as long as there is no health information contained on the sheet.
100
What do the Privacy Regulations seek to do?
The privacy regulation establish that personal health information must be kept confidential.
100
Does your supervisor have access to review your entire personnel file?
No. There would be no need for your supervisor to have access to your health information to do their job.
200
Two components of the HIPPA regulation.
What are the Privacy Rule and Security Standard.
200
PHI
What is Protected Health Information
200
Can we leave message for a patient about an upcoming appointment?
Yes, as long as no specific health information is included in the message.
200
Protected health information includes information about...
1. a person's health, health care, or payment of health care (the term "health" includes mental health and behavioral health issues) 2. information that identifies a person 3. services created or received by a covered health care plan or provider.
200
Do all patients have to take a "Notice of our Privacy Practices?"
No. We must offer it to everyone one time. If they refuse it, we must document the attempt to give it to them.
300
"Business Associate"
What is a person or entity who provides certain functions, activities, or services for FSR, involving the use and/or disclosure of protected health information, other than a member of our workforce.
300
HIPAA
What is The Health Insurance Portability and Accountability Act.
300
Can I release PHI to a patient's spouse?
Yes, we can release PHI to a patient's spouse, relative, or close friend if we can reasonably infer that the patient does not object and that it will be in the patient's best interest.
300
Name at least three components of a HIPAA compliant Authorization for Release
A specific description of the information to be disclosed Who is authorized to make the disclosure Who is authorized to receive the disclosure A description of how the PHI will be used An expiration date or event Authorizing individual’s signature and date Statement of individual’s right to revoke Statement of potential of re-disclosure Authorization must be written in plain language Individual must be provided with a copy of the signed authorization Covered entity may not condition treatment on whether the individual signs the authorization
300
Can we fax PHI?
Yes, if standard precautions are taken to ensure reasonable security of the transmitted data.
400
During what presidential administration was the HIPAA standards enacted?
What is the Clinton adminstration.
400
Name at least 2 circumstances under which protected health information may be disclosed without a client's consent or authorization.
1. disclosures required by law 2. permitted disclosures for public health activities (such as reporting diseases, collecting vital statistics, etc.) 3. disclosure about victims of abuse, neglect or domestic violence 4. health oversight activities 5. disclosures for judicial or administrative proceedings 6. disclosure for law enforcement purposes 7. use and disclosure for research purposes 8. disclosures to avert a serious threat to health or safety
400
Can I discuss a patient's situation with them on the phone when other clients are at the desk or in the lobby?
You may, but caution should be used to minimize exposure to others, this is an example of an incidential disclosure that is unavoidable in day to day practice.
400
Make sure the front window is closed when calling patients Make sure patient forms/files aren’t visible to other patients or visitors Speak quietly when discussing patient information Lock file cabinets/rooms Use “time out” or auto logout for computers Position computers so screens aren’t visible to patients Verify fax numbers to make sure PHI isn’t misdirected
Name 3 safeguards that can mitigate the risk of incidental disclosure of patient information
400
Can I share a patients PHI with their insurance company?
Yes. This is considered part of treatment, payment or health care operation and does not require the patient's authorization. Only the minimum information is shared.
500
This country singer's medical records were sold to the National Enquirer and Star tabloids by a hospital employee for $2,610?
Who is Tammy Wynette
500
"Minimum necessary HIPAA rule"
What is information that cannot be shared if you do not need the information to do your job.
500
Can an adult who is not a child's parent or legal guardian accompany them to a medical appointment? Can we share the child's PHI with them?
From a strictly HIPAA standpoint, yes, but other regulations governing minors may still mandate that parental consent is documented.
500
Notice of Privacy Practices: Name 2 of the 5 rights individuals have within the Privacy Rule.
1. What is the Right to receive a “Notice of Privacy Practices” 2. Right to authorize any use or disclosure of protected health information 3. Right to restrict use or disclosure of protected health information 4. Right to an accounting of disclosure of protected health information 5. Right to inspect, copy and request amendments to protected health information
500
Can we discuss a client's PHI with other providers involved in their care or other provider to whom we are referring them?
Yes. This is part of treatment and does not require authorization.
M
e
n
u