The document discusses the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its privacy rule. HIPAA imposed new regulations on the healthcare industry. Title II of HIPAA, known as the Administrative Simplification section, mandates compliance with the privacy rule. The privacy rule requires healthcare organizations to have policies and procedures to properly handle protected health information, train staff, monitor compliance, and maintain documentation showing compliance with handling protected health information.

4. HEALTH INSURANCE PORTABILITY AND
ACCOUNTABILITY ACT OF 1996 (HIPAA)
 Also known as Public Law Number 104
of the 191st Congress (PL 104-191), as
legislation that imposed new
regulations on the health care industry.
 Although the law consists of five
sections-known as Titles-, only Title II
fuels most HIPAA-related change.
 Referred to as “Preventing Health Care
Fraud and Abuse, Administrative
Simplification, and Medical Liability
Reform”, Title II, in part, mandates
compliance with a Privacy Rule

5. THE PRIVACY RULE
 HIPAA’s Privacy Rule, makes compliance
contingent upon four mandates (Gratto-
Liebler, McConnell, 2012)
1. Have policies and procedures addressing
the handling of patient medical
information
2. Train staff members in the proper
handling of protected health information
(PHI)
3. Monitor compliance with all
requirements for handling protected
health information
4. Maintain documented proof that all
pertinent information-handling
requirements are being fulfilled

6. MANAGERIAL INITIATIVE
 As a manager, I would put training in
place that clearly conveys the
organization’s position on upholding, and
complying with, HIPAA regulations.
 The best way to integrate the
organization’s proactive training with
industry-trend utilization of technology in
the workplace, would be computer
training modules.
 Not only would these modules expressly
inform team members of the law, they
would also present factual data
representing the outcomes of indiscretion
with protected health information (PHI).
 Training on privacy and confidentiality
would allow an employer to avoid the
consequences of negligence, misconduct,
and unethical behavior.

7. PERSONAL EXPERIENCE
I AM CURRENTLY A PHARMACY TECHNICIAN AT ONE OF THE NATION’S LARGEST RETAIL DRUG CHAINS. WE
RECENTLY ROLLED OUT AN INTRAORGANIZATIONAL CONFIDENTIALITY CAMPAIGN, AND COMPUTER TRAINING
MODULE, SPECIFICALLY ADDRESSING THE PROTECTION OF CELEBRITIES’ PROTECTED HEALTH INFORMATION
(PHI). THIS TRAINING FOLLOWED THE THEME OF “NEED-TO-KNOW” INTERACTIONS; MEANING THE ONLY
PERSONS THAT NEED TO ACCESS A PATIENT’S PHI ARE THOSE DIRECTLY, AND INDIRECTLY, INVOLVED IN THE
PATIENT’S CARE AT THAT TIME.