Health Information Data Sharing: HIPAA Facts and Fallacies
|
|
|
- Maude Harper
- 6 years ago
- Views:
Transcription
1 Health Information Data Sharing: HIPAA Facts and Fallacies August 30, 2017 Co-sponsored by: 1 Health Information Data Sharing: HIPAA Facts and Fallacies August 30, 2017
2 How to Use Webex Q & A 1. Open the Q&A panel 2. Select All Panelists 3. Type your question 4. Click Send 2 Health Information Data Sharing: HIPAA Facts and Fallacies August 30, 2017
3 Presenter Jennifer Bernstein, J.D., Deputy Director, The Network for Public Health Law Mid-States Region J.D., M.P.H.,University of Iowa Research interests/areas of expertise: HIPAA Health Equity Health Information and data sharing Mental Health and Trauma informed care Sexual, reproductive and maternal health 3 Health Information Data Sharing: HIPAA Facts and Fallacies August 30, 2017
4 Objective Equip public health practitioners with HIPAA basics, terminology, mythbusters, and strategies to maximize access to and the exchange of health information while maintaining the public s trust
5 HIPAA basics» What is it?» What does it do?» To whom does it apply?» What does it cover?» What does it require?» What does it allow?» What is a breach?» What must be done?» How is it enforced» What are the penalties?
6 HIPPA stands for the Health Information Privacy Protection Act.
7 HIPPA stands for the Health Information Privacy Protection Act. X
8 What is HIPAA?»Electronic transactions»privacy»security»breach notification HIPPA Health Insurance Portability & Accountability Act It s more than privacy... X
9 Data protection = Applies to health information in all forms Defines circumstances in which identifiable information may be used and disclosed Applies to health information in electronic form Requires safeguards to protect data from unauthorized access Images:
10 What does HIPAA do? (privacy)»requires appropriate safeguards to protect the privacy of personal health information»sets limits and conditions on uses and disclosures that may be made of such information without patient authorization»gives patients rights over their health information
11 What does HIPAA do? (privacy)»gives patients rights over their health information - Right to access - Right to request amendment of PHI - Right to request confidential communications - Right to an accounting of disclosures - Notice of privacy practices
12 What does HIPAA do? (security)»requires appropriate administrative, physical and technical safeguards to ensure the confidentiality, integrity, and security of electronic PHI (ephi)»ephi = transmitted by electronic media or maintained in electronic form
13 What does HIPAA do?»includes provisions regarding compliance, and investigations, imposition of civil money penalties for violations of HIPAA and procedures for hearing
14 HIPAA applies to most health care providers.
15 HIPAA applies to most health care providers.
16 To whom does HIPAA apply?»certain (most) health care providers»health plans»health care clearinghouses»called covered entities ( CE )»OCR Am I a covered entity? tool»business Associates of a covered entity
17 Certain health care providers» Broad definition includes doctors, clinics, psychologists, dentists, nurses, pharmacies, etc.» But only if they transmit information in electronic form in connection with an electronic standard transaction that HHS has adopted a standard - Basically means that provider has to communicate electronically with health plans/payors - E.g. request for payment, eligibility check, prior authorization, etc.
18 Health plans» Health insurance companies» HMOs» Company health plans» Government programs that pay for health care e.g. Medicare, Medicaid, SCIP» But does not include government grants to fund health care
19 Business Associates» A person or organization that is not a member of CE s workforce» Performs functions on behalf of CE or provides services to CE» Where access to PHI is involved» Examples: billing services; document destruction services; outside attorneys and accountants; computer service technicians; software vendors; cloud computing vendors» Must have written agreement (BAA)
20 All public health departments are required to comply with HIPAA.
21 All public health departments are required to comply with HIPAA. X
22 Does HIPAA apply to:»all of my health department?»some of my health department?»none of my health department?
23 Hybrid entity means a single legal entity:»that is a covered entity»whose business activities include both covered and non-covered functions; and»that designates health care components by separating them from its other components and documenting the designation
24 Is your governmental entity a hybrid? Should it be?»pros: Reduce compliance costs Avoid HIPAA challenges when implementing nonhealth programs Reduce exposure to liability»cons: Must follow procedures to create a hybrid Apply different privacy standards depending on program Administrative and technical requirements
25 My health department (or program) is not covered by HIPAA. This means that I don t need to know what HIPAA says.
26 My health department (or program) is not covered by HIPAA. This means that I don t need to know what HIPAA says. X
27 Public health in population health role»health care providers are crucial source of PHI needed by health departments to protect and improve the public s health»most health care providers are covered by HIPAA»Providers may question or deny access to information
28 HIPAA covers all health information.
29 HIPAA covers all health information. X
30 What does HIPAA cover? HIPAA Privacy Rule covers»use and disclosure of protected health information (PHI) Use The sharing, employment, application, utilization, examination, or analysis of PHI within the entity that maintains the PHI Disclose The release, transfer, provision of access to, or divulging in any manner of PHI outside the entity holding the PHI
31 Protected health information (PHI)» Information, including demographic information: - In any form: written, electronic or oral - Relating to past, present or future - Physical or mental health status or condition - Provision of health care - Payment for provision of health care» That identifies the individual or for which there is a reasonable basis to believe can be used to identify the individual» No longer PHI 50 years after individual s death
32 What does HIPAA cover? PHI does not include:» Student records» Research records held by non-covered entities»employment records that may contain health information»health information held by governmental entities that are not covered entities» De-identified information
33 Aggregate data does not identify individuals. This means that I can release the data below with no HIPAA concerns pediatric H1N1 cases by county < 1year 1-5years 6-10yrs 11-17yrs Auburn Beacon Calhoun Davis
34 Aggregate data does not identify individuals. This means that I can release the data below with no HIPAA concerns pediatric H1N1 cases by county < 1year 1-5years 6-10yrs 11-17yrs Auburn Beacon Calhoun Davis X
35 Is aggregate data PHI? 2009 pediatric H1N1 cases by county < 1year 1-5years 6-10yrs 11-17yrs Auburn Beacon Calhoun Davis Eaton Fulton
36 Protected health information (PHI)» Information, including demographic information: - In any form: written, electronic or oral - Relating to past, present or future - Physical or mental health status or condition - Provision of health care - Payment for provision of health care» That identifies the individual or for which there is a reasonable basis to believe can be used to identify the individual» No longer PHI 50 years after individual s death
37 HIPAA prohibits my local school district from providing to my local health department routine vaccination information about individual students, absent the parent s consent.
38 HIPAA prohibits my local school district from providing to my local health department routine vaccination information about individual students, absent the parent s consent. X
39 What does HIPAA cover? PHI does not include education records that are covered by the Family Educational Rights Privacy Act (FERPA) Records that are - Directly related to a student; and - Maintained by a school or a party acting for the school, (includes a nurse employee and a nurse contractor)» Includes transcripts, disciplinary records, and similar records.» Includes immunization and other medical or health related records
40 Pleasant Valley School has a measles outbreak. HIPAA prohibits the school from sharing information with our local health department that identifies students who have not been vaccinated against measles.
41 Pleasant Valley School has a measles outbreak. HIPAA prohibits the school from sharing information with our local health department that identifies students who have not been vaccinated against measles. X
42 HIPAA vs. FERPA»HIPAA Privacy Rule applies to: - Health plans and health care providers that transmit information electronically regarding covered transactions (related to payment for health care) - Protected health information individually identifiable information related to patient health status, condition, care, or payment»protected health information - Excludes individually identifiable health information in education records covered by FERPA»Bottom line: If FERPA applies, HIPAA does not
43 What does HIPAA require? Privacy: Basic rules»covered entities are prohibited from using or disclosing PHI unless required or allowed by HIPAA privacy rule»rule provides numerous exceptions that permit disclosure»if another law provides greater privacy protection or greater rights to individual concerning his/her health information, must comply with the other law
44 Minimum necessary rule»except for treatment purposes, must limit uses and disclosures of PHI to the minimum amount necessary to accomplish the intended purpose - Do not disclose more information than required - Do not access information you don t need
45 Permissible disclosures Basic Rule: Covered entities are prohibited from using or disclosing PHI unless required or allowed by HIPAA privacy rule
46 What does HIPAA allow? Major exceptions to privacy prohibition»to patient (or legal representative, e.g. generally parent access to child s info)»tpo - Treatment: provision, coordination, management of care/related services including consults and referrals - Payment for health care reimbursement for health care, coverage, all related activities - Health care operations next slide
47 Exception health care operations»activities directly related to treatment and payment (e.g. utilization review, quality assessment, training)»supporting activities (e.g. computer systems support, in-house legal counsel)»administrative and managerial activities (e.g. business planning, resolving complaints, complying with HIPAA)
48 Exception Family & Friends»May disclose PHI to family, relatives, friends involved in individual s care / payment for care»if individual present, opportunity to agree or disagree to disclosure (can be inferred)» Can use professional judgment»give individuals ability to designate someone / revoke designation - See OCR guidance on family & friends»generally, personal representative can exercise all right of individuals
49 HIPAA prohibits Community Hospital from reporting a case of Hepatitis C to my health department, absent the patient s authorization.
50 HIPAA prohibits Community Hospital from reporting a case of Hepatitis C to my health department, absent the patient s authorization. X
51 Collection & use of data» Public health broad authority to collect data to prevent and control disease and protect public health (1977 S. Ct opinion, Whalen v Roe)» Established by state law» Corresponding duty to protect information» HIPAA should not impede public health data collection functions
52 HIPAA exceptions that allow disclosure to public health departments» Required by law mandate contained in law that is enforceable in a court of law - Law includes statutes, administrative rules, executive orders (such as under Emergency Management Law), court-ordered subpoenas, etc.» Public health to public health authorities and their authorized agents for public health purposes, including but not limited to public health surveillance, investigations, and interventions
53 I am investigating an outbreak of Hepatitis C at Community Hospital. I am entitled to look at all of Community Hospital s patient records.
54 I am investigating an outbreak of Hepatitis C at Community Hospital. I am entitled to look at all of Community Hospital s patient records. X
55 Minimum necessary rule»minimum necessary applies to disclosure to public health for public health purposes»except for treatment purposes, must limit uses and disclosures of PHI to the minimum amount necessary to accomplish the intended purpose - Do not disclose more information than required - Do not access information you don t need
56 Community Hospital should determine what records are necessary for my investigation, and provide these to me as the minimum necessary.
57 Community Hospital should determine what records are necessary for my investigation, and provide these to me as the minimum necessary. X
58 When a health care provider refuses to provide access (without an authorization)»statements of authority»hipaa does not impact public health s authority»covered entity may rely on government s written statement regarding its authority, or if written statement impracticable, on oral statement of such authority
59 HIPAA and immunization records»treatment (other providers, PH immun clinic)»public Health (immun clinic, IIS, health dept to school)»health care provider/ce may disclose to a school, about an individual who is a student or prospective student of the school: - Limited to proof of immunization - Law must require proof of immunization to attend school - Covered entity obtains and documents agreement to the disclosure (may be oral)
60 HIPAA and public health emergency preparedness and response» As required by law» To public health authority» To identify, locate, and notify family members» To disaster relief agency» To avert a serious and imminent threat to health and safety of a person or the public» To protect national security» To law enforcement under certain circumstances» For judicial or administrative proceedings
61 Public health departments have been fined for HIPAA violations.
62 Public health departments have been fined for HIPAA violations.
63 Risk of liability (HIPAA)» Complaints & audits» Civil fines» Alaska Dept of Health & Social Services settles HIPAA security case for $1.7 million (electronic Medicaid info)» Skagit County, WA settles HIPAA case for $215,000; county public health department
64 Risk of liability» Lawsuits - Breach of privacy lawsuits - Andrew Speaker sued CDC and claimed that CDC had breached his privacy by revealing his name to the press» State civil and criminal penalties - Public health employee who knowingly releases confidential information is guilty of a misdemeanor
65 Ultimate risk: losing community trust Residents Partners and stakeholders Ammunition for opponents of government s authority to obtain information about individuals without consent
66 What is a breach?»impermissible use or disclosure that compromises the security or privacy of PHI
67 What must be done? Breach notification laws» HIPAA notify Patient Secretary of HHS (all security incidents reported yearly; breaches over 500 reported individually) Media (breach over 500 people)» Determine whether your state has a breach notification law
68 HIPAA Breach Notification Safe Harbor» Don t have to notify if: - PHI was encrypted, or - PHI was disposed consistent with HHS guidance on secure disposal
69 How is HIPAA enforced?»complaints, investigations, audits»federal enforcement»state enforcement»hipaa does not provide a private cause of action... but, an individual may still have a claim under state law for a breach of confidentiality or invasion of privacy
70 What are the penalties?»civil money penalties based on nature and extent of violation and harm resulting from violation (see next slide)»criminal HHS Office for Civil Rights can refer complaint to Department of Justice
71 Civil penalties for HIPAA Violations Culpability for violation Per violation Maximum for identical violation of same HIPAA provision per calendar year Did not know $100 up to $50,000 $1,500,000 Reasonable cause $1,000 up to $50,000 $1,500,000 Willful neglect corrected in timely manner Willful neglect not corrected $10,000 up to $50,000 $1,500,00 $50,000 $1,500,000
72 Contact Jennifer Bernstein, J.D., Deputy Director, The Network for Public Health Law Mid-States Region Phone: Health Information Data Sharing: HIPAA Facts and Fallacies August 30, 2017
73 How to Use Webex Q & A 1. Open the Q&A panel 2. Select All Panelists 3. Type your question 4. Click Send 73 Health Information Data Sharing: HIPAA Facts and Fallacies August 30, 2017
74 Thank you for attending For a recording of this webinar and information about future webinars, please visit networkforphl.org/webinars You may qualify for CLE credit. All webinar attendees will receive an from ASLME, an approved provider of continuing legal education credits, with information on applying for CLE credit for this webinar. 74 Health Information Data Sharing: HIPAA Facts and Fallacies August 30, 2017
Patient Privacy Requirements Beyond HIPAA
Patient Privacy Requirements Beyond HIPAA Jane Hyatt Thorpe, J.D. School of Public Health and Health Services George Washington University Carrie Bill, J.D. Feldesman Tucker Leifer Fidell LLP The George
OREGON HIPAA NOTICE FORM
MARCIA JOHNSTON WOOD, Ph.D. Clinical Psychologist 5441 SW Macadam, #104, Portland, OR 97239 Phone (503) 248-4511/ Fax (503) 248-6385 - Effective Sept.23, 2013 - (This copy for you to keep) OREGON HIPAA
SUMMARY OF NOTICE OF PRIVACY PRACTICES
LAKE REGIONAL MEDICAL GROUP 54 HOSPITAL DRIVE OSAGE BEACH, MO 65065 SUMMARY OF NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU
Notice of Privacy Practices for Protected Health Information (PHI)
Notice of Privacy Practices for Protected Health Information (PHI) Dermatology Associates of Colorado, PC THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN
HIPAA PRIVACY NOTICE
HIPAA PRIVACY NOTICE PLEASE REVIEW THIS NOTICE CAREFULLY. IT DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU MAY GAIN ACCESS TO THAT INFORMATION. POLICY STATEMENT This Practice
Notice of Privacy Practices
Notice of Privacy Practices, pg. 1 of 5 Notice of Privacy Practices CATHOLIC CHARITIES OF THE ROMAN CATHOLIC DIOCESE OF SYRACUSE, NY This notice describes the privacy practices of Catholic Charities of
NOTICE OF PRIVACY PRACTICES Mid-Atlantic Women s Care, PLC Effective Date: September 23, 2013 Last Revised: February 15, 2018
NOTICE OF PRIVACY PRACTICES Mid-Atlantic Women s Care, PLC Effective Date: September 23, 2013 Last Revised: February 15, 2018 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION: HIPAA PRIVACY POLICY
Page Number 1 of 8 TITLE: PURPOSE: USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION: HIPAA PRIVACY POLICY To assure that individually identifiable health information contained in any University Health
MURRAY MEDICAL CENTER HIPAA NOTICE OF PRIVACY PRACTICES
CW CR 618 Exhibit A MURRAY MEDICAL CENTER HIPAA NOTICE OF PRIVACY PRACTICES Effective Date: THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS
This notice describes Florida Hospital DeLand s practices and that of: All departments and units of Florida Hospital DeLand.
MRN: FIN: FLORIDA HOSPITAL DELAND HIPAA NOTICE OF PRIVACY PRACTICES Effective Date: September 23, 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN
Notice of Privacy Practices
River Valley Chiropractic LLC Notice of Privacy Practices Effective 9/2014; Revised 9/2014 If you have any questions about this notice, please contact the River Valley Chiropractic Privacy Officer at 308-534-5840.
Regulatory Issues Facing Student Health Centers Presented by: Richard T. Yarmel and Edward H. Townsend
Higher Education Institute: Avoiding Compliance Pitfalls Across Your Campus From Admissions to the Title IX Office to the Board Room Regulatory Issues Facing Student Health Centers Presented by: Richard
If you have any questions about this notice, please contact the SSHS Privacy Officer at:
Notice of Privacy Practices 0 Effective Date: April 14, 2003 Revision Date: July 15, 2016 South Shore Health System ( SSHS ) is an integrated health care delivery system. For a list of entities which comprise
Slide 1 WHO IS THE CLIENT? WHO CONTROLS THE RECORD? ETHICS AND HIPAA. Slide 2. Slide 3. The Four As of Ethical Practice
Slide 1 WHO CONTROLS THE RECORD? ETHICS AND HIPAA 22 nd Oklahoma Child Abuse & Neglect Conference Norman, Oklahoma, on September 4, 2014 Dr. Arlene B. Schaefer, Ph.D. Forensic and Clinical Psychology Oklahoma
NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES Effective Date: April 14, 2003 Revised: September 23, 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS
PATIENT INFORMATION Please Print
PATIENT INFORMATION Please Print DATE Patient s Last Name First Name Middle Name Suffix Gender: q Male q Female Social Security Number of Birth Race Ethnic Group: q Hispanic q Non-Hispanic q Unknown Preferred
NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES Effective Date: May 31, 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW
NOTICE OF PRIVACY PRACTICES MOUNT CARMEL HEALTH SYSTEM
NOTICE OF PRIVACY PRACTICES MOUNT CARMEL HEALTH SYSTEM Effective Date: 9/23/ 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES Effective Date: 2013 Wisconsin Dental Association (800) 243-4675 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS
NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES This notice describes how Pine Creek Medical Center may use and disclose your medical information, and how you may access this information. Please read through and review it
HIPAA in DPH. HIPAA in the Division of Public Health. February 19, February 19, 2003 Division of Public Health 1
HIPAA in the Division of Public Health February 19, 2003 February 19, 2003 Division of Public Health 1 Handouts HIPAA Definitions AG Advisory Opinion - Definition of Health Plan DPH Coverage Determination
HH Health System-Shoals, LLC dba Helen Keller Hospital Notice of Privacy Practices
HH Health System-Shoals, LLC dba Helen Keller Hospital Notice of Privacy Practices THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
WAKE FOREST BAPTIST HEALTH NOTICE OF PRIVACY PRACTICES
WAKE FOREST BAPTIST HEALTH NOTICE OF PRIVACY PRACTICES Effective April 14, 2003 Revised February 17, 2010 Revised September 23, 2013 Revised July 1, 2016 This Notice of Privacy Practices applies to the
JOINT NOTICE OF PRIVACY PRACTICES
JOINT NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. Who Will Follow This Notice PLEASE REVIEW
NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. WHY ARE YOU GETTING
PRIVACY POLICY USES AND DISCLOSURES FOR TREATMENT, PAYMENT, AND HEALTH CARE OPERATIONS
PRIVACY POLICY As of April 14, 2003, the Federal regulation on patient information privacy, known as the Health Insurance Portability and Accountability Act (HIPAA), requires that we provide (in writing)
S.E. Wisconsin Hearing Center Inc.
NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. Effective Date:
CAPITAL SURGEONS GROUP, PLLC
CAPITAL SURGEONS GROUP, PLLC NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW
Catholic Charities Disabilities Services. In-Home Behavioral Support Services (2017)
Catholic Charities Disabilities Services In-Home Behavioral Support Services (2017) A Program funded through a Family Support Services Grant from OPWDD Submit Application and supporting documentation to:
CHI Mercy Health. Definitions
CHI Mercy Health Definitions If you have any questions about this notice, please contact the CHI Mercy Health s Privacy Office at (701) 845-6540 or 570 Chautauqua Blvd, Valley City ND 58072. Notice of
Advanced Oral & Maxillofacial Surgery, Ltd. NOTICE OF PRIVACY PRACTICES
Advanced Oral & Maxillofacial Surgery, Ltd. NOTICE OF PRIVACY PRACTICES This notice describes how health information about you may be used and disclosed and how you can get access to this information.
PATIENT BILL OF RIGHTS & NOTICE OF PRIVACY PRACTICES
Helping People Perform Their Best PRIVACY, RIGHTS AND RESPONSIBILITIES NOTICE PATIENT BILL OF RIGHTS & NOTICE OF PRIVACY PRACTICES Request Additional Information or to Report a Problem If you have questions
If you have any questions about this notice, please contact our privacy officer Dr. Jev Sikes at
Notice of Privacy Practices For Deep Eddy Psychotherapy THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT
Senior Care Pharmacy Wichita
Senior Care Pharmacy Wichita 1402 S.RIDGE ROAD WICHITA, KS, 67209 Phone: 316-945-7455 Fax: 316-945-7457 Contact:- Carol Parsons Dear patient/responsible party, Effective immediately, each patient/responsible
NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES 1 Effective Date: April 14, 2003 Revision Date: September 23, 2013 Revision Date: January 17, 2018 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
Opp Health and Rehabilitation, LLC 115 Paulk Avenue P.O. Box 730 Opp, AL Phone Number: (334)
Opp Health and Rehabilitation, LLC 115 Paulk Avenue P.O. Box 730 Opp, AL 36467-1695 Phone Number: (334) 493-4558 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW
Notice of HIPAA Privacy Practices Updates
Notice of HIPAA Privacy Practices Updates The following is a summary of the updates to the privacy notice for Meridian Hospitals Corporation, Meridian Home Care Services, Inc., Meridian Nursing & Rehabilitation,
HIPAA Privacy Rights and Operations Guide HIPAA Security Summary For the Practice of: Vail Aspen Breckenridge Dermatology
HIPAA Privacy Rights and Operations Guide HIPAA Security Summary For the Practice of: Vail Aspen Breckenridge Dermatology Publish Date: 1/2/2018 This guide has been created to serve Vail Aspen Breckenridge
FAMILY PHARMACEUTICAL SERVICES NOTICE OF PRIVACY PRACTICES effective 9/23/2013
FAMILY PHARMACEUTICAL SERVICES NOTICE OF PRIVACY PRACTICES effective 9/23/2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES 1 Effective Date: April 14, 2003 Revised: September 23, 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO
always legally required to follow the privacy practices described in this Notice.
The ANXIETY & STRESS MANAGEMENT INSTITUTE 1640 Powers Ferry Rd, Building 9, Suite 10 0, Marietta, Georgia 30067, 770-953-0080 Health Insurance Portability and Accountability Act (HIPAA) NOTICE OF PRIVACY
ADVANCED PLASTIC SURGERY, PLLC. NOTICE OF PRIVACY PRACTICES
Effective Date: July 1 st 2013 ADVANCED PLASTIC SURGERY, PLLC. NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO
JOINT NOTICE OF PRIVACY PRACTICES
JOINT NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. respects
PEDIATRIC HEALTH ASSOCIATES HIPAA NOTICE OF PRIVACY PRACTICES
Policy effective date: 4-14-2003 Revised January 2014 PEDIATRIC HEALTH ASSOCIATES HIPAA NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND
Accommodate reasonable requests you may have to communicate health information by alternative means or at alternative locations.
Collom & Carney Clinic Association NOTICE OF PRIVACY PRACTICES Effective Date: April 14, 2003 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS
Catholic Charities Disabilities Services 2017 Family Reimbursement Grant For Respite Funds 1 Park Place, Suite 200 Albany, NY (518)
Catholic Charities Disabilities Services 2017 Family Reimbursement Grant For Respite Funds 1 Park Place, Suite 200 Albany, NY 12205 (518) 783-1111 Instructions (Please read thoroughly prior to completing
WRAPPING YOUR HEAD AROUND HIPAA PRIVACY REQUIREMENTS
WRAPPING YOUR HEAD AROUND HIPAA PRIVACY REQUIREMENTS Jeffrey Staton Attorney at Law Legal Aid Society of Louisville 416 W. Muhammad Ali Blvd., Ste. 300 Louisville, KY 40202 Phone: 502.614.3146 Jstaton@laslou.org
NOTICE OF PRIVACY PRACTICES
535 East 70th Street New York, NY 10021 (212) 606-1000 Specialists in Mobility NOTICE OF PRIVACY PRACTICES Effective Date: April 14, 2003 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE
Southwest Acupuncture College /PWFNCFS
Southwest Acupuncture College /PWFNCFS This replaces policies in the catalogue and any other documents to date. Boulder Santa Fe TABLE OF CONTENTS STATEMENT OF PURPOSE... 1 I. RIGHT TO A NOTICE OF PRIVACY
HIPAA Notice of Privacy Practices
HIPAA Notice of Privacy Practices Georgia Mountains Hospice understands that your health information is highly personal and we are committed to safeguarding your privacy. Please read this Notice of Privacy
NOTICE OF PRIVACY PRACTICES
VII-07B Notice of Privacy Practices (p) The MetroHealth System 2500 MetroHealth Drive Cleveland, OH 44109-1998 NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW WE MAY USE AND DISCLOSE YOUR PROTECTED
Notice of. Privacy Practices. Dartmouth-Hitchcock Affiliated Covered Entity
Notice of Privacy Practices Dartmouth-Hitchcock Affiliated Covered Entity This Notice describes how medical information about you may be used and disclosed and how you can get access to this information.
Protecting Patient Privacy It s Everyone s Responsibility
1 of 27 Protecting Patient Privacy It s Everyone s Responsibility This presentation is comprised of 27 screens. When you have finished reading a screen, click your mouse to continue to the next screen.
NOTICE OF PRIVACY PRACTICES
Amended September 2013 NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
What is HIPAA? Purpose. Health Insurance Portability and Accountability Act of 1996
Patient Privacy and HIPAA/HITECH What is HIPAA? Health Insurance Portability and Accountability Act of 1996 Implemented in 2003 Title II Administrative Simplification It s a federal law HIPAA is mandatory,
DO ASK BUT DON T TELL HIPAA PRIVACY RULE
DO ASK BUT DON T TELL HIPAA PRIVACY RULE HITECH/OMNIBUS FINAL RULE HIPAA enacted in 1996; compliance required April 14, 2003 for the Privacy Rule and April 21, 2005 for the Security Rule surrounding electronic
HIPAA Policies and Procedures Manual
UNIVERSITY of NORTH CAROLINA at CHAPEL HILL SCHOOL of NURSING HIPAA Policies and Procedures Manual November 2015 1 Table of Contents I. INTRODUCTION... 3 A. GENERAL POLICY... 3 B. SCOPE... 3 II. DEFINITIONS...
PARAGOULD DOCTORS CLINIC PRIVACY NOTICE
PARAGOULD DOCTORS CLINIC PRIVACY NOTICE Protected Health Information THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE
NOTICE OF PRIVACY PRACTICES
BUTTE COUNTY DEPARTMENT OF BEHAVIORAL HEALTH NOTICE OF PRIVACY PRACTICES Effective Date: 4/14/2003 THIS NOTICE DESCRIBES NOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS
A general review of HIPAA standards and privacy practices 2016
A general review of HIPAA standards and privacy practices 2016 45 CFR, 164 Health Insurance Portability and Accountability Act Treatment, Payment and Healthcare Operations 42 CFR, Part 2, Confidentiality
The Privacy & Security of Protected Health Information
The Privacy & Security of Protected Health Information By the end of this course, you should: Be familiar with the patient s rights to privacy under HIPAA Privacy Act Be able to identify Protected Health
Greenwood Connections Notice of Privacy Practice
Note: This notice describes how healthcare information about you may be used and disclosed and how you can get access to this information. Please read it carefully. This Notice is effective April 1, 2003
MSK Group, PC NOTICE O F PRIVACY PRACTICES Effective Date: December 30, 2015
MSK Group, PC NOTICE O F PRIVACY PRACTICES Effective Date: December 30, 2015 This notice describes how medical information about you may be used and disclosed and how you can get access to this information.
A Better You Counseling Services, LLC 1225 Johnson Ferry Road, Ste 170 Marietta GA
A Better You Counseling Services, LLC 1225 Johnson Ferry Road, Ste 170 Marietta GA 30068 404-216-1135 Health Insurance Portability and Accountability Act (HIPAA) NOTICE OF PRIVACY PRACTICES I. COMMITMENT
NOTICE OF PRIVACY PRACTICES
Effective 10-9-2013 This notice of privacy practices describes how Family Chiropractic Health Care manages and protects your personal information. THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU
New York Notice Form Notice of Psychologists Policies and Practices to Protect the Privacy of Your Health Information
New York Notice Form Notice of Psychologists Policies and Practices to Protect the Privacy of Your Health Information THIS NOTICE DESCRIBES HOW PSYCHOLOGICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
INFORMED CONSENT FOR TREATMENT
INFORMED CONSENT FOR TREATMENT I (name of patient), agree and consent to participate in behavioral health care services offered and provided at/by Children s Respite Care Center, a behavioral health care
NOTICE OF PRIVACY PRACTICES
THIS NOTICE OF PRIVACY PRACTICES ( NOTICE ) DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. Respect for
Gastroenterology Consultants A Division of Gastrointestinal and Liver Specialists of Tidewater, PLLC. Rights of Patients
Gastroenterology Consultants A Division of Gastrointestinal and Liver Specialists of Tidewater, PLLC Rights of Patients Gastroenterology Consultants has adopted a comprehensive list of patient rights and
ERIE COUNTY MEDICAL CENTER CORPORATION NOTICE OF PRIVACY PRACTICES. Effective Date : April 14, 2003 Revised: August 22, 2016
ERIE COUNTY MEDICAL CENTER CORPORATION NOTICE OF PRIVACY PRACTICES Effective Date : April 14, 2003 Revised: August 22, 2016 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
FCSRMC 2017 HIPAA PRESENTATION
FCSRMC 2017 HIPAA PRESENTATION BDO USA, LLP, a Delaware limited liability partnership, is the U.S. member of BDO International Limited, a UK company limited by guarantee, and forms part of the international
FERPA, CHALLENGES FACING SCHOOL NURSES & DISCIPLINARY ACTIONS FERPA. MELANIE BALESTRA, MN, NP, JD JD August May 4, 22, 2012
FERPA, CHALLENGES FACING SCHOOL NURSES & DISCIPLINARY ACTIONS FERPA MELANIE BALESTRA, MN, NP, JD JD August May 4, 22, 2012 Definition Family Education Rights and Privacy Act of 1974 (Buckley Amendment)
NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES Effective Date: July 12, 2017 THIS NOTICE OF PRIVACY PRACTICES ( NOTICE ) DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO
BON SECOURS RICHMOND NOTICE OF PRIVACY PRACTICES
BON SECOURS RICHMOND NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFEULLY.
Balance Fitness and Nutrition
Balance Fitness and Nutrition HIPPA Notice of Privacy Practices Effective Date: January 29, 2012 THIS NOTICE DESCRIBES HOW PROTECTED HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN
NOTICE OF PRIVACY PRACTICES UNIVERSITY OF CALIFORNIA RIVERSIDE CAMPUS HEALTH CENTER
NOTICE OF PRIVACY PRACTICES UNIVERSITY OF CALIFORNIA RIVERSIDE CAMPUS HEALTH CENTER Effective Date: April 14, 2003 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND
Notice of Privacy Practices
Notice of Privacy Practices This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. If you have any
Pain Specialists of Greater Chicago Notice of Privacy Practices
1 Pain Specialists of Greater Chicago Notice of Privacy Practices This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please
WELCOME. Payment will be expected at the time of service. Please remember our 24 hour cancellation notice.
WELCOME Those of us at Crossroads Counseling want to thank you for choosing to work with us and we want to make your time with us as productive as possible. In order to expedite the intake process, please
NOTICE OF PRIVACY PRACTICES
EFFECTIVE DATE: APRIL 14, 2003 NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW
R. Gregory Cochran, MD, JD
California Academy of Attorneys for Health Care Professionals October 19-21, 2012 Government Subpoenas (and other Requests) and Health Privacy Considerations R. Gregory Cochran, MD, JD Overview Overview
NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES JANUARY 1, 2018 EFFECTIVE DATE Regenesis Health care Notice of Privacy Practices This notice describes how medical information about you may be used and disclosed and how you
2018 Employee HIPAA Orientation (EHO) Handbook
2018 Employee HIPAA Orientation (EHO) Handbook Using EHO The material in this booklet is designed to provide newly hired employees with an understanding of HIPAA s regulations and their impact on the employee
NOTICE OF HOSPICE EL PASO S PRIVACY PRACTICES
NOTICE OF HOSPICE EL PASO S PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
PSYCHOTHERAPIST-PATIENT SERVICES AGREEMENT COLORADO
Heidi A. Sauder, Ph.D. Sauder Psychology, Inc. 9085 E. Mineral Cir., Suite 235 Centennial, CO 80112 720.548.7825 heidi@sauderpsychology.com www.sauderpsychology.com PSYCHOTHERAPIST-PATIENT SERVICES AGREEMENT
Notice of Privacy Practices for Protected Health Information
Notice of Privacy Practices for Protected Health Information This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review
REVISED NOTICE OF PRIVACY PRACTICES ORIGINAL DATE: JANUARY 1, 2003 REVISED: JANUARY 16, 2014 REVISED: NOVEMBER 27, 2017 PLEASE REVIEW IT CAREFULLY
REVISED NOTICE OF PRIVACY PRACTICES ORIGINAL DATE: JANUARY 1, 2003 REVISED: JANUARY 16, 2014 REVISED: NOVEMBER 27, 2017 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
HIPAA Education Program
HIPAA Education Program 2017-2018 Assurance and Compliance Services HIPAA Training Requirement This HIPAA Training Program is intended for and will satisfy the training requirement for the: Mount Sinai
Parental Consent For Minors to Receive Services
Parental Consent For Minors to Receive Services Welcome to the University of San Diego s Wellness Area! We appreciate your coming our way, and look forward to working with you. The following provides important
Johns Hopkins Notice of Privacy Practices for Health Care Providers
Johns Hopkins Notice of Privacy Practices for Health Care Providers This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please
(PLEASE PRINT) Sex M F Age Birthdate Single Married Widowed Separated Divorced. Business Address Business Phone Cell Phone
(PLEASE PRINT) Emma Warner, MSW, LCSW, ACSW Tulsa, OK 74105 (918) 749-6935 Personal Information Name Address Last Name First Name Initial Home Phone Soc. Sec. # City State Zip Sex M F Age Birthdate Single
NOTICE OF PRIVACY PRACTICES
Page 1 of 10 NOTICE OF PRIVACY PRACTICES EFFECTIVE DATE: The Notice of Privacy Practices became effective on April 14, 2003 and was amended on August 30, 2013. THIS NOTICE DESCRIBES HOW HEALTH INFORMATION
HIPAA THE PRIVACY RULE
HIPAA THE PRIVACY RULE Reviewed December 2012 HISTORY In 2000, many patients that were newly diagnosed with depression received free samples of antidepressant medications in their mail. 2 HISTORY Many
Payment: We are permitted to use and disclose your health information to receive payment for our services. For example, we may:
Your Rx Pharmacy Notice of our privacy practices THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
REPORT OF THE BOARD OF TRUSTEES. Protection of Clinician-Patient Privilege (Resolution 237-A-17)
REPORT OF THE BOARD OF TRUSTEES B of T Report 16-A-18 Subject: Presented by: Referred to: Protection of Clinician-Patient Privilege (Resolution 237-A-17) Gerald E. Harmon, MD, Chair Reference Committee
NOTICE OF PRIVACY PRACTICES This Notice is effective September 23, 2013
NOTICE OF PRIVACY PRACTICES This Notice is effective September 23, 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
GREATER HUDSON VALLEY HEALTH SYSTEM ORANGE REGIONAL MEDICAL CENTER CATSKILL REGIONAL MEDICAL CENTER Policy/Procedure
Policy/Procedure Manual: Hospital Wide Section: HIPAA Policy #: 110118 The Joint Commission Chapter: SUBJECT: Effective Date: 7/13 HIPAA Notice of Privacy Practices Policy Revision Date:10/14,4/15,2/16
Advanced HIPAA Communications and University Relations
Advanced HIPAA Communications and University Relations accepts no liability of any use reliance placed on it, as it is warranty, express, or implied, or completeness of 1 the HIPAA Health Insurance Portability
Notice of Privacy Practices
Notice of Privacy Practices THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. If you have any
OAK HAMMOCK AT THE UNIVERSITY OF FLORIDA, INC. NOTICE OF PRIVACY PRACTICES. Privacy Office: (352) Effective Date: September 23, 2013
OAK HAMMOCK AT THE UNIVERSITY OF FLORIDA, INC. NOTICE OF PRIVACY PRACTICES Privacy Office: (352) 548-1142 Effective Date: September 23, 2013 THIS NOTICE DESCRIBES HOW PROTECTED HEALTH INFORMATION ABOUT