Title: Class Outline 26
Course: KVCC BUS118 > Section: Class Outlines

1.      The Health Insurance Portability Act HIPAA

a.      Purpose

i.           Pre-existing condition

ii.           Portability

iii.           Genetic Testing

iv.           Administrative Simplification

b.      Scope

i.           Protected Health Information (PHI)

ii.           Covered Entities

1.      Health Plan

2.      Health Care Clearinghouse

3.      Health Care Provider

4.      Business Associates

a.      Amendments from HITECH Act

iii.           Requirements of the privacy rule

1.      Three main purposes

a.      Consumer control of their health information

b.      Restore consumer trust in health care system

c.      National framework for health privacy protection

2.      Use – how a covered entity shares or handles PHI within its organization

3.      Disclosure – refers to how a covered entity shares PHI with other organizations that may not be affiliate with it.

4.      Required Disclosures

a.      Personal access and request to send to other party

b.      When HHS is investigating the person

c.      Disclosures that can be denied – pg 159

d.      Disclosures without consent – pg 160

e.      Other Disclosures

i.           Made to person

ii.           Treatment, Payment, and Health care Operations

iii.           Uses and disclosures made after an opportunity to opt out

iv.           Uses and disclosures made for public health and safety activities

1.      Vital statistics and Communicable Diseases

2.      Abuse and Neglect

3.      Required by law and law enforcement

4.      Limited Data sets used or disclosed for specified activities

f.       Disclosures that require authorization

g.      Minimum Necessary Rule

h.      Amendments of PHI

i.        Accounting of Disclosures

j.        Privacy Notices

i.           Specific Parts Pg 169

ii.           Material Change

iii.           Effective Date

iv.           Examples

k.      Administrative Requirements

i.           Privacy programs based on size and scope

ii.           Internal Contact

iii.           Policies and Procedures

iv.           Training

l.        Breach Notification

i.           Changes from the HITECH act

ii.           Low probability pg 171

iii.           Unsecured PHI

iv.           Secured PHI

v.           Notification rules

vi.           What is necessary as part of notification pg 172

m.    Security Rule

i.           EPHI Electronic Protected Health Information

ii.           Safeguards and Implementation

1.      Administrative Safeguards

1.      Security Management Process

2.      Assigned Security Responsibility

3.      Workforce Security

4.      Information access Management

5.      Security awareness and training

6.      Security incident procedures

7.      Contingency Plan

8.      Evaluation

9.      Business associate contracts

2.      Physical Safeguards

1.      Facility Access controls

2.      Workstation Use

3.      Workstation Security

4.      Device and media Controls

3.      Technical Safeguards

1.      Access Controls

2.      Audit Controls

3.      Integrity Controls

4.      Person or entity authentication

5.      Transmission security

n.      Oversight

i.           Office for Civil Rights

ii.           Maximum fine

iii.           Minimum fine

o.      State Laws

p.      Case Studies

Attached Files: | - KVCC BUS118_LegalAspectsBusInfoSys_Class Outlline 26(1).pdf