HIPAA/HITECH Privacy and Security Student Training

Transcript:HIPAA/HITECH Privacy and Security Student Training:
HIPAA/HITECH Privacy and Security Student Training Academic Year 2014-2015 Introduction Welcome to HIPAA/HITECH Privacy and Security training. As you may know, all health care organizations are required to comply with HIPAA/HITECH Privacy and Security Regulations. These regulations have undergone several updates, the latest of which were enacted in 2013. As UConn Health School of Medicine, School of Dental Medicine, and graduate students you most likely will have access to patients’ confidential health information and, therefore, are required to complete HIPAA/HITECH education. Thank you for completing this important training. Continuation in your educational program is contingent upon completion of this training. When it comes to privacy and accountability, people always demand the former for themselves and the latter for everyone else. David Brinkley UConn Health’s Confidentiality Policy “All individuals are expected to be professional and maintain confidentiality at all times, whether dealing with actual records, projects, or conversations….” “All individuals having access to confidential information are bound by strict ethical and legal restrictions…..” Refer to UCHC policy # 2002-43 Confidentiality What types of information must UCHC protect? Medical/Dental/Behavioral Health-related patient information Research data requiring protections (clinical trials, patient survey responses, etc.) as required by the NIH. Student information. Employee human resources and financial information. Any information about employees, students, patients, Board Members, etc. which includes Social Security numbers. Financial information IDs and/or Passwords for access to UConn Health computing resources. Other confidential or sensitive UConn Health information not in the public domain. HIPAA/HITECH Privacy and Security HIPAA at a Glance HIPAA stands for: Health Insurance Portability and Accountability Act The “Health Insurance Portability”(HIP) part of HIPAA was intended to ensure the continuity of health insurance coverage for workers changing jobs. To facilitate this goal, Congress mandated national standards for transmitting and protecting health information. The “Accountability” part of HIPAA was designed to ensure the security and confidentiality of patient information/data and requires uniform standards for electronic transmission of data relating to patient health information. HIPAA Privacy The HIPAA Privacy Rule was enacted to: establish national privacy protection standards for all forms of health information created by “covered entities”, including health care providers. set limits on the uses and disclosures of such information. give patients rights over their health records. HIPAA Security The HIPAA Security Rule was enacted to: establish national standards for the security of electronic health information (ePHI). protect individuals’ ePHI that is created, received, used or maintained by covered