HIPAA Basics
This law stands for the Health Insurance Portability and Accountability Act.
What is HIPAA?
This acronym refers to Protected Health Information.
What is PHI?
When safeguarding PHI, associates should provide only this amount of information needed to perform the job or address the task.
What is the minimum information necessary?
This detailed document permits a CE (Covered Entity) or BA (Business Associate) to use or disclose PHI for a purpose that HIPAA would otherwise not permit.
What is a HIPAA Authorization?
Sending an email containing PHI to the wrong person or vendor is an example of this.
What is a Privacy Event?
HHS uses this term for a health care provider, health plan, or health care clearinghouse.
What is a CE (Covered Entity)?
PHI includes health information plus this type of information that directly identifies - or can be used to identify - an individual.
What is individually identifiable health information?
PHI may be disclosed for these 3 core purposes without a HIPAA authorization in many routine situations.
What are TPO (Treatment, Payment, and Healthcare Operations)?
A valid HIPAA Authorization should identify the PHI, purpose, parties, revocation right, re-disclosure statement, expiration, and this final item.
What are the signature and date?
If you suspect a Privacy Event, you should take this action immediately - even if you are not certain a breach occured.
What is report it right away?
This person or organization performs functions involving the use or disclosure of PHI on behalf of a CE (Covered Entity).
What is BA (Business Associate)?
These are 3 examples of identifiers that can make health information individually identifiable.
What are name, SSN, employee number, policy or account number, or date of birth?
A subpoena, regulation, or court order is an example of this type of permitted PHI disclosure.
What is a legal requirement disclosure?
This member right allows a person to inspect or obtain a copy of their PHI.
What is the right to access PHI?
What is a business need to know?
This legal contract explains the responsibilities of a BA (Business Associate) and a CE (Covered Entity) when PHI is involved.
What is a BAA (Business Associate Agreement)?
PHI may be found in each of these 3 formats.
What are electronic, paper, and verbal formats?
This individual or representative may receive PHI when exercising the right to access the individuals own health records.
Who is the individual, member, or personal representative?
This member right allows a person to correct PHI that is incomplete or inaccurate.
What is the right to amend PHI?
Paper containing PHI should be handled this way instead of being placed in the trash.
What is shredded?
These three activities are commonly abbreviated TPO and are situations in which a HIPAA authorization is generally not required.
What are Treatment, Payment, and Healthcare Operations?
This is the information a Financial Professional should provide first when the team needs to locate a policy record.
What is the policy number?
Financial Professionals are their associates have this status when they receive or discuss PHI.
What is not a HIPAA regulated Business Associate?
This member right concerns receiving a record of certain disclosures of PHI, subject to exceptions.
What is the right to an accounting of PHI?
HIPAA violations can lead to civil fines, disciplinary action up to termination, and for certain violations this.
What are criminal charges, fines, and imprisonment?