Title: Class Outline 24
Course: KVCC BUS118 > Section: Class Outlines

a.      CIPA – Children’s Internet Protection Act

i.           Passed in 2000 with a deadline of July 1 2004.

ii.           Purpose – Protect minors from accessing offensive content on the Internet.

iii.           Visual Content – definitions page 132

iv.           E-Rate

v.           Requirements

1.      Content Filtering

2.      Internet Safety Policy

vi.           Exceptions

vii.           Oversight – The FCC regulates CIPA.

1.      Family Educational Rights and Privacy (FERPA) – Passed in 1974

2.      Protects the privacy of student educational records

3.      Parents have rights until student turns 18 and then it passes to them

4.      Scope

a.      Any education agency or institution that receives federal funding. If they do not receive any funds then they are not liable under FERPA.

5.      Requirements

a.      Definitions

i.           Student – anyone that has been in attendance at the institution

ii.           Attendance – any physical or virtual attendance at the facility

iii.           Education Records – any record that was saved while they were at the institution or agency.

b.      PII – pg 137

c.      Four Requirements

i.           Annual Notification

1.      Identify rights

2.      How to file complaints

3.      What school officials have access

4.      Provide all necessary means to reach parents and students

ii.           Access to education Records

iii.           Amendment of Education Records

iv.           Disclosure of records

1.      Written consent requirements pg 139

2.      Exceptions pg 140

6.      Responding to requests

7.      Security of Records

8.      Oversight

9.      Case Studies

BUS 118 Chapter 6

10.  Challenges facing health care industry

a.      Medical identity theft

11.  Why is this information sensitive

a.      Hippocratic oath

b.      Privacy Concerns

c.      Finality of a leak or disclosure

12.  Other Laws Affecting Health care

13.  The Health Insurance Portability Act HIPAA

a.      Purpose

i.           Pre-existing condition

ii.           Portability

iii.           Genetic Testing

iv.           Administrative Simplification

b.      Scope

i.           Protected Health Information (PHI)

ii.           Covered Entities

1.      Health Plan

2.      Health Care Clearinghouse

3.      Health Care Provider

4.      Business Associates

a.      Amendments from HITECH Act

iii.           Requirements of the privacy rule

1.      Three main purposes

a.      Consumer control of their health information

b.      Restore consumer trust in health care system

c.      National framework for health privacy protection

2.      Use – how a covered entity shares or handles PHI within its organization

3.      Disclosure – refers to how a covered entity shares PHI with other organizations that may not be affiliate with it.

4.      Required Disclosures

a.      Personal access and request to send to other party

b.      When HHS is investigating the person

c.      Disclosures that can be denied – pg 159

d.      Disclosures without consent – pg 160

e.      Other Disclosures

i.           Made to person

ii.           Treatment, Payment, and Health care Operations

iii.           Uses and disclosures made after an opportunity to opt out

iv.           Uses and disclosures made for public health and safety activities

1.      Vital statistics and Communicable Diseases

2.      Abuse and Neglect

3.      Required by law and law enforcement

4.      Limited Data sets used or disclosed for specified activities

f.       Disclosures that require authorization

g.      Minimum Necessary Rule

h.      Amendments of PHI

i.     Accounting of Disclosures

Attached Files: | - KVCC BUS118_LegalAspectsBusInfoSys_Class Outlline 24(2).pdf