Acronyms
PHI
Names
Breach
Access
100
ROI
What is Release of Information
100
Persons name, date of birth, address and phone number's are considered form of identifiers
What is Protected Health Information (PHI)
There are 18 PHI Identifiers
100
Chief Compliance Officer
Who is Donnetta Horseman
100
Unauthorized access or disclosure of PHI for any reason other than treatment, payment, or healthcare operations
What is a breach
100
Treatment, payment, healthcare operations of patients medical record
What is appropriate access
200
PHI
What is Protected Health Information
200
Sending emails securely containing PHI externally
What is encryption
Mimecast located within your email to send securely
200
Individual notifications must be provided without unreasonable delay and in no case later than 60 days following the date of discovery
What is Breach Notification Letter
These letters are mailed to the individual(s) with a brief description of the information that was involved in the breach.
200
Team member learns their neighbor is patient and wants to access the patients medical record. Even though this team member is not part of the care team but is an active employee.
What is inappropriate access
300
HIPAA
What is the Health Insurance Portability and Accountability Act
300
When stepping away from your computer/laptop you should do what to protect the access of ePHI
What is logging off or locking my PC to secure ePHI, this includes never sharing your credentials
300
Director of Compliance
Who is Autumn Smallwood
300
August 21, 1996
" The Daily Double"
What is the enactment date for HIPAA
The Health Insurance Portability and Accountability Act of 1996
300
Employee is aware her co-worker is patient and is on PTO for the day. The employee is wondering if perhaps the co-worker is scheduled for an appointment here today and views capstone to confirm
What is inappropriate access
Not part of the care team this is consider co-worker snooping.
400
TPO
What is Treatment, Payment and Healthcare Operations
This describes some of the circumstances in which covered entities are allowed to disclose patient information without the need to obtain authorization from patients.
400
Proper disposal of Protected Health Information (PHI)
What is locked Shred Bin
400
Employees, volunteers, student interns, trainees
who are team members
400
$100 to $50,000 per violation (or per record), with a maximum penalty of $1.5 million per year for violations of an identical provision. Violations can also carry criminal charges that can result in jail time
What are the minimum and maximum penalties for HIPAA violations
400
A nurse goes to lunch and another nurse assumes care of her patients. During this time, a (VIP) celebrity patient needs pain medication. The covering nurse accesses the medical record of the celebrity patient to administer as needed
What is appropriate access
500
OCR
"The Daily Double"
What is the Office of Civil Rights
The Office for Civil Rights (OCR) ensures equal access to certain health and human services and protects the privacy and security of health information.
500
Written, oral, tattoos or electronic information (implanted device serial numbers) that identifies an individual
What are forms of Protected Health Information (PHI)
500
Privacy and Program Integrity Officer
"The Daily Double"
Who is Shallie Bryant
500
Over 500 patients/individuals have been affected by breach
what is notifying the media
500
Team member suspects there have been several cases of COVID-19 reported on current patients and the team member is not part of the care team to any of these patients, only curious to test results
What is inappropriate access