Acts
Laws
Records
Data
Misc.
100

GINA

Genetic Information Nondiscrimination Act- addresses the ethical issue of confidentiality of genetic information

100

Out of court statements that are offered to prove the truth of the matter asserted

Hearsay

100

Group of health care professionals who are charged with the responsibility for evaluating, maintaining, and/or monitoring the quality and utilization of health care services

Peer Review Committee

100

DHHS

Department of Health and Human Services- provides effective health and human services and by fostering sound, sustained advances in the sciences underlying medicine, public health, and social services

100

Year HIPAA was established

1996

200

Addresses the disclosure of drug abuse records

Drug Abuse Prevention, Treatment, and Rehabilitation Act

200

Protects any confidential information about a client who has applied for or received any alcohol or drug abuse related services

Federal Substance Abuse Confidentially laws

200

No longer protected 50 years after death

Protected Health Info (PHI)

200

Legal requirement to inform individuals when their personal information has been compromised

Breach Notification

200

Designed to map the genes found in human DNA and determine the sequences of the chemical base pairs that make up human DNA

Human Genome Project

300

Passed in 1964 aiming to end discrimination

Civil Rights Act

300

Command issued by a court or other authorized official to appear and/or present certain documents and other things.

Subpoena

300

Unique identification number for covered health care providers, created to help send health information electronically more quickly and effectively

National Standard Healthcare Provider Identifier (NPI)

300

Form of technical security used to ensure that data transferred from one network location to another is secure from eavesdropping or interception

Encryption

300

Involves using a unique identifier on blood sample and consent form, gets reported to public health authorities.

Anonymous testing

400

Requires that CMS provide incentive payments under Medicare and Medicaid to “Meaningful Users” of Electronic Health Records.

HITECH Act 

400

TPO

Treatment, Payment, and Operations- Healthcare organizations may use and share patient information for treatment, payment, and operations under the HIPAA treatment, payment, and operations (TPO) exception without the patient's consent. This exception supports effective healthcare services, such as billing, staff training, quality evaluations, information sharing among professionals, and privacy protection

400

Who is given access to information for audit activities? (3 answers)

1. those acting on behalf of a federal/state/local government agency providing financial assistance to the treatment program

2. those acting on behalf of third-party payers, peer rvw organizations, or private organizations providing financial assistance

3. those qualified to conduct the audit as determined by program director

400

Defined as one who performs or assists in performing a function or activity involving the use or disclosure of individually identifiable health information on behalf of a covered entity

Business Associate

400

Private entity that conducts inspections and surveys of health care facilities based on nationally recognized and developed standards

Accreditation Organization

500

HIPAA provision that allows the use of de-identified data

Safe Harbor

500

Requires DHHS to establish national standards for electronic health care transactions and national identifiers for providers, health plans, and employers ans addresses the security and privacy of health data

HIPAA Title II

500

Requirements of business record exception

  • Made and kept in the ordinary course of business
  • At or near the time the event was recorded
  • By a person with knowledge of the acts, events, conditions, options, or diagnoses appearing in it
500

Used for encoding data elements, such as medical terms, medical concepts, medical diagnosis codes, and medical procedure codes.

Transaction Code Sets (TCS)

500

Utilization review process (5 parts)

1. Preadmission review

2. Admission review

3. concurrent review

4. discharge planning

5. audits/reviews for compliance