SlideShare a Scribd company logo
1 of 21
CHAPTER
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2
The Use of Health
Information
Technology in
Physician Practices
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
Learning Outcomes
When you finish this chapter, you will be able to:
2.1 Describe the functions of practice management
programs.
2.2 Identify the core functions of an electronic health
record system.
2.3 Discuss the advantages of electronic health records.
2.4 Describe the impact of health information technology
on documentation and coding.
2.5 Discuss how the HIPAA Privacy Rule and Security
Rule protect patient health information.
2.6 Explain how the measures put in place by the
HITECH Act strengthen HIPAA privacy and security
requirements.
2-2
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
Key Terms
• administrative
safeguards
• audit/edit report
• audit trail
• autoposting
• breach
• clearinghouse
• CMS-1500 (08/05)
• computer-assisted
coding
• electronic data
interchange (EDI)
2-3
• electronic funds transfer
(EFT)
• electronic medical
records (EMRs)
• electronic prescribing
• evidence-based
medicine
• health information
technology (HIT)
• HIPAA (Health
Information Portability
and Accountability Act of
1996)
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
Key Terms (Continued)
• HIPAA Electronic
Transaction and Codes
Sets standards
• HIPAA Privacy Rule
• HIPAA Security Rule
• HITECH (Health
Information Technology
for Electronic and Clinical
Health Act)
• National Provider
Identifier (NPI)
2-4
• personal health records
(PHRs)
• physical safeguards
• protected health
information (PHI)
• technical safeguards
• walkout statement
• workflow
• X12-837 Health Care
Claim (837P)
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.1 Functions of Practice
Management Programs
2-5
• Health information technology (HIT) is a term
used to refer to the computer hardware,
software, and networks that are used to record,
store, and manage patient health care
information
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.1 Functions of Practice Management
Programs (Continued)
2-6
• Most offices use a practice management
program (PMP) to complete routine office tasks,
including:
– Patient scheduling
– Recording patient information
– Creating and transmitting electronic claims
– Receiving electronic payments
– Billing patients
– Creating financial reports
– Collecting on overdue accounts
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.1 Functions of Practice Management
Programs (Continued)
2-7
• A clearinghouse is a company that collects
electronic insurance claims from medical
practices and forwards the claims to the
appropriate health plans
• An audit/edit report is sent from the
clearinghouse to the practice, after the basic edit
is complete
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.1 Functions of Practice Management
Programs (Continued)
2-8
• Reimbursement
– A walkout statement lists the procedures performed,
the charges for the procedures, and the amount paid
by the patient
– Autoposting is an automated process for entering
information on a remittance advice (RA) into a
computer
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.2 Functions of Electronic
Health Record Programs
2-9
• Electronic medical records (EMRs) are
computerized records of one physician’s
encounters with a patient over time
• Personal health records (PHRs) are private,
secure electronic files that are created,
maintained, and owned by the patient
• Electronic prescribing is the use of computers
and handheld devices to transmit prescriptions
to pharmacies in digital format
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.2 Functions of Electronic Health
Record Programs (Continued)
2-10
• Electronic health records (EHRs) may include
information from multiple EMRs and have eight
core functions:
1. Health information and data elements
2. Results management
3. Order management
4. Decision support
5. Electronic communication and connectivity
6. Patient support
7. Administrative support
8. Population reporting and management
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.3 Advantages of Electronic
Health Records
2-11
• Advantages of EHRs include:
– Increased patient safety
– Improved quality of care
– Greater efficiency
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.3 Advantages of Electronic
Health Records (Continued)
2-12
• Evidence-based medicine refers to medical
care that uses the latest and most accurate
clinical research in making decisions about the
care of patients
• The Health Information Technology for
Economic and Clinical Health Act (HITECH) is
intended to promote the use of EHRs in
physician practices and hospitals through the
use of financial incentives
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.4 The Impact of HIT on Documentation
and Coding
2-13
• A Workflow is a set of activities designed to
produce a specific outcome
• The process of assigning preliminary diagnosis
and procedure codes with a computer is known
as computer-assisted coding
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.4 The Impact of HIT on Documentation
and Coding (Continued)
2-14
• Impact of HIT on Documentation and Coding
– Every service must be documented in order to receive
reimbursement
– Incomplete or incorrect documentation may result in
claim denials or even a federal investigation
– All codes should be reviewed to ensure accuracy
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.5 HIPAA Legislation and its Impact
on Physician Practices
2-15
• The Health Insurance Portability and
Accountability Act of 1996 (HIPAA) contains a
number of rules, including:
– HIPAA Electronic Transaction and Code Sets
standards
– HIPAA Privacy Rule
– HIPAA Security Rule
– Final Enforcement Rule
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.5 HIPAA Legislation and its Impact
on Physician Practices (Continued)
2-16
• HIPAA Electronic Transaction and Code Sets
standards
– Describe an electronic format that providers and
health plans must use to send and receive health care
transactions
– The electronic transmission of data is called
electronic data interchange (EDI)
– Payment may be via electronic funds transfer (EFT)
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.5 HIPAA Legislation and its Impact
on Physician Practices (Continued)
2-17
• Claim Formats
– The HIPAA-standard X12-837 Health Care Claim, or
837P
– The CMS-1500 (08/05) paper claim
• The National Provider Identifier (NPI) is a ten-
position numerical identifier consisting of all
numbers
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.5 HIPAA Legislation and its Impact
on Physician Practices (Continued)
2-18
• HIPAA Privacy Rule
– Protects individually identifiable health information
– Mandates rules all covered entities must follow in
protecting patients’ privacy
– Information that can be used to find out a person’s
identification, is referred to as protected health
information (PHI)
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.5 HIPAA Legislation and its Impact
on Physician Practices (Continued)
2-19
• HIPAA Security Rule
– Outlines safeguards to protect health information
stored on a computer system or transmitted across
computer networks
– Administrative safeguards: the policies and
procedures that protect electronic health information
– Physical safeguards: the mechanisms required to
protect electronic systems, equipment, and data
– Technical safeguards: the automated processes
used to protect data and control access to data
• An audit trail is a report that shows who has accessed
information and when
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.5 HIPAA Legislation and its Impact
on Physician Practices (Continued)
2-20
• HIPAA in the Age of Health Information
Technology
– A breach is the acquisition, access, use, or disclosure
of unsecured PHI in a manner not permitted under the
HIPAA Privacy Rule
© 2011 The McGraw-Hill Companies, Inc. All rights reserved.
2.6 The HITECH Act’s Impact on
Privacy and Security
2-21
• The HITECH Act introduced additional privacy
and security regulations, including:
– Breach notification
– Monetary penalties
– Advanced enforcement

More Related Content

What's hot

Improving Efficiency and Outcomes in Healthcare using Internet of Things
Improving Efficiency and Outcomes in Healthcare using Internet of ThingsImproving Efficiency and Outcomes in Healthcare using Internet of Things
Improving Efficiency and Outcomes in Healthcare using Internet of ThingsCitiusTech
 
Mbm Hipaa Hitech Ss Compliance Risk Assessment
Mbm Hipaa Hitech Ss Compliance Risk AssessmentMbm Hipaa Hitech Ss Compliance Risk Assessment
Mbm Hipaa Hitech Ss Compliance Risk AssessmentMBMeHealthCareSolutions
 
Smart grid - report
Smart grid - reportSmart grid - report
Smart grid - reportSwetha Kaza
 
Healthcare Compliance: HIPAA and HITRUST
Healthcare Compliance: HIPAA and HITRUSTHealthcare Compliance: HIPAA and HITRUST
Healthcare Compliance: HIPAA and HITRUSTControlCase
 
Challenges and Opportunities Around Integration of Clinical Trials Data
Challenges and Opportunities Around Integration of Clinical Trials DataChallenges and Opportunities Around Integration of Clinical Trials Data
Challenges and Opportunities Around Integration of Clinical Trials DataCitiusTech
 
MBM eHealthCare Solutions HIPAA-HITECH & Meaningful Use Risk Analysis
MBM eHealthCare Solutions HIPAA-HITECH & Meaningful Use Risk AnalysisMBM eHealthCare Solutions HIPAA-HITECH & Meaningful Use Risk Analysis
MBM eHealthCare Solutions HIPAA-HITECH & Meaningful Use Risk AnalysisCharles McNeil
 
HIPAA Audit Implementation
HIPAA Audit ImplementationHIPAA Audit Implementation
HIPAA Audit ImplementationValency Networks
 
iHT2 Health IT Summit Boston 2013 – Chris Petteruti, Director of Technology D...
iHT2 Health IT Summit Boston 2013 – Chris Petteruti, Director of Technology D...iHT2 Health IT Summit Boston 2013 – Chris Petteruti, Director of Technology D...
iHT2 Health IT Summit Boston 2013 – Chris Petteruti, Director of Technology D...Health IT Conference – iHT2
 
eHealth - Medical Systems Interoperability & Mobile Health
eHealth - Medical Systems Interoperability & Mobile HealtheHealth - Medical Systems Interoperability & Mobile Health
eHealth - Medical Systems Interoperability & Mobile Healthulmedical
 
MPCA HIPAA Compliance/Meaningful Use Requirements and Security Risk Assessmen...
MPCA HIPAA Compliance/Meaningful Use Requirements and Security Risk Assessmen...MPCA HIPAA Compliance/Meaningful Use Requirements and Security Risk Assessmen...
MPCA HIPAA Compliance/Meaningful Use Requirements and Security Risk Assessmen...Michigan Primary Care Association
 
Clear health platform[3]
Clear health platform[3]Clear health platform[3]
Clear health platform[3]Tony TRAN
 
Implementation of Consent in Health Information Exchange (HIE)
Implementation of Consent in Health Information Exchange (HIE)Implementation of Consent in Health Information Exchange (HIE)
Implementation of Consent in Health Information Exchange (HIE)CitiusTech
 
A Proposed Framework for Regulating AI Based Applications in SaMD
A Proposed Framework for Regulating AI Based Applications in SaMDA Proposed Framework for Regulating AI Based Applications in SaMD
A Proposed Framework for Regulating AI Based Applications in SaMDEMMAIntl
 
Health insurance information platform (hiip)
Health insurance information platform (hiip)Health insurance information platform (hiip)
Health insurance information platform (hiip)ACCESS Health Digital
 
Medical device data protection and security
Medical device data protection and security Medical device data protection and security
Medical device data protection and security Erik Vollebregt
 
Information Security & Compliance in Healthcare: Beyond HIPAA and HITECH
Information Security & Compliance in Healthcare: Beyond HIPAA and HITECHInformation Security & Compliance in Healthcare: Beyond HIPAA and HITECH
Information Security & Compliance in Healthcare: Beyond HIPAA and HITECHNovell
 
Health delivery information system [HDIS] MVP
Health delivery information system [HDIS] MVPHealth delivery information system [HDIS] MVP
Health delivery information system [HDIS] MVPACCESS Health Digital
 
Triad Ingenix Dossia Presentation
Triad Ingenix Dossia PresentationTriad Ingenix Dossia Presentation
Triad Ingenix Dossia PresentationRobert Horton
 

What's hot (19)

Improving Efficiency and Outcomes in Healthcare using Internet of Things
Improving Efficiency and Outcomes in Healthcare using Internet of ThingsImproving Efficiency and Outcomes in Healthcare using Internet of Things
Improving Efficiency and Outcomes in Healthcare using Internet of Things
 
Mbm Hipaa Hitech Ss Compliance Risk Assessment
Mbm Hipaa Hitech Ss Compliance Risk AssessmentMbm Hipaa Hitech Ss Compliance Risk Assessment
Mbm Hipaa Hitech Ss Compliance Risk Assessment
 
Smart grid - report
Smart grid - reportSmart grid - report
Smart grid - report
 
Healthcare Compliance: HIPAA and HITRUST
Healthcare Compliance: HIPAA and HITRUSTHealthcare Compliance: HIPAA and HITRUST
Healthcare Compliance: HIPAA and HITRUST
 
Challenges and Opportunities Around Integration of Clinical Trials Data
Challenges and Opportunities Around Integration of Clinical Trials DataChallenges and Opportunities Around Integration of Clinical Trials Data
Challenges and Opportunities Around Integration of Clinical Trials Data
 
MBM eHealthCare Solutions HIPAA-HITECH & Meaningful Use Risk Analysis
MBM eHealthCare Solutions HIPAA-HITECH & Meaningful Use Risk AnalysisMBM eHealthCare Solutions HIPAA-HITECH & Meaningful Use Risk Analysis
MBM eHealthCare Solutions HIPAA-HITECH & Meaningful Use Risk Analysis
 
HIPAA Audit Implementation
HIPAA Audit ImplementationHIPAA Audit Implementation
HIPAA Audit Implementation
 
iHT2 Health IT Summit Boston 2013 – Chris Petteruti, Director of Technology D...
iHT2 Health IT Summit Boston 2013 – Chris Petteruti, Director of Technology D...iHT2 Health IT Summit Boston 2013 – Chris Petteruti, Director of Technology D...
iHT2 Health IT Summit Boston 2013 – Chris Petteruti, Director of Technology D...
 
eHealth - Medical Systems Interoperability & Mobile Health
eHealth - Medical Systems Interoperability & Mobile HealtheHealth - Medical Systems Interoperability & Mobile Health
eHealth - Medical Systems Interoperability & Mobile Health
 
Clinical Engineering
Clinical EngineeringClinical Engineering
Clinical Engineering
 
MPCA HIPAA Compliance/Meaningful Use Requirements and Security Risk Assessmen...
MPCA HIPAA Compliance/Meaningful Use Requirements and Security Risk Assessmen...MPCA HIPAA Compliance/Meaningful Use Requirements and Security Risk Assessmen...
MPCA HIPAA Compliance/Meaningful Use Requirements and Security Risk Assessmen...
 
Clear health platform[3]
Clear health platform[3]Clear health platform[3]
Clear health platform[3]
 
Implementation of Consent in Health Information Exchange (HIE)
Implementation of Consent in Health Information Exchange (HIE)Implementation of Consent in Health Information Exchange (HIE)
Implementation of Consent in Health Information Exchange (HIE)
 
A Proposed Framework for Regulating AI Based Applications in SaMD
A Proposed Framework for Regulating AI Based Applications in SaMDA Proposed Framework for Regulating AI Based Applications in SaMD
A Proposed Framework for Regulating AI Based Applications in SaMD
 
Health insurance information platform (hiip)
Health insurance information platform (hiip)Health insurance information platform (hiip)
Health insurance information platform (hiip)
 
Medical device data protection and security
Medical device data protection and security Medical device data protection and security
Medical device data protection and security
 
Information Security & Compliance in Healthcare: Beyond HIPAA and HITECH
Information Security & Compliance in Healthcare: Beyond HIPAA and HITECHInformation Security & Compliance in Healthcare: Beyond HIPAA and HITECH
Information Security & Compliance in Healthcare: Beyond HIPAA and HITECH
 
Health delivery information system [HDIS] MVP
Health delivery information system [HDIS] MVPHealth delivery information system [HDIS] MVP
Health delivery information system [HDIS] MVP
 
Triad Ingenix Dossia Presentation
Triad Ingenix Dossia PresentationTriad Ingenix Dossia Presentation
Triad Ingenix Dossia Presentation
 

Similar to Cimo7e ppt ch02

Ehealthcaresystemshbemrpreppp 124794516192-phpapp01
Ehealthcaresystemshbemrpreppp 124794516192-phpapp01Ehealthcaresystemshbemrpreppp 124794516192-phpapp01
Ehealthcaresystemshbemrpreppp 124794516192-phpapp01heartbeatemr
 
E healthcare systems Details
E healthcare systems DetailsE healthcare systems Details
E healthcare systems Detailsemronly
 
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01emronly
 
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01gorami1234
 
Midwest Regional Health - EHR
Midwest Regional Health - EHRMidwest Regional Health - EHR
Midwest Regional Health - EHRWILLIE GREER
 
Redspin February 17 2011 Webinar - Meaningful Use
Redspin February 17 2011 Webinar - Meaningful UseRedspin February 17 2011 Webinar - Meaningful Use
Redspin February 17 2011 Webinar - Meaningful UseRedspin, Inc.
 
HIT - 2015 (3).ppt
HIT - 2015 (3).pptHIT - 2015 (3).ppt
HIT - 2015 (3).pptDunakanshon
 
CHAPTER© 2012 The McGraw-Hill Companies, Inc. All rights r
CHAPTER© 2012 The McGraw-Hill Companies, Inc. All rights rCHAPTER© 2012 The McGraw-Hill Companies, Inc. All rights r
CHAPTER© 2012 The McGraw-Hill Companies, Inc. All rights rJinElias52
 
HIPAA/HITECH Requirements for FQHCs and the New Omnibus Rule
HIPAA/HITECH Requirements for FQHCs and the New Omnibus RuleHIPAA/HITECH Requirements for FQHCs and the New Omnibus Rule
HIPAA/HITECH Requirements for FQHCs and the New Omnibus RuleMichigan Primary Care Association
 
Comp8 unit2 lecture_slides
Comp8 unit2 lecture_slidesComp8 unit2 lecture_slides
Comp8 unit2 lecture_slidesCMDLMS
 
Amy walker aami_%202011(7)
Amy walker aami_%202011(7)Amy walker aami_%202011(7)
Amy walker aami_%202011(7)Amy Stowers
 
Chapter 17 Implementing and Upgrading an Information System Soluti.docx
Chapter 17 Implementing and Upgrading an Information System Soluti.docxChapter 17 Implementing and Upgrading an Information System Soluti.docx
Chapter 17 Implementing and Upgrading an Information System Soluti.docxcravennichole326
 
HIMSS16_IHE USA_Impact of IHE Profiles on Patient Care_Final-Full
HIMSS16_IHE USA_Impact of IHE Profiles on Patient Care_Final-FullHIMSS16_IHE USA_Impact of IHE Profiles on Patient Care_Final-Full
HIMSS16_IHE USA_Impact of IHE Profiles on Patient Care_Final-FullSeonho Kim
 
E-health appications
E-health appicationsE-health appications
E-health appicationsAnkita Kunwar
 
AAMI_HITECH MU: Impact on the Future of HC IT
AAMI_HITECH MU:  Impact on the Future of HC ITAAMI_HITECH MU:  Impact on the Future of HC IT
AAMI_HITECH MU: Impact on the Future of HC ITAmy Stowers
 
Meaningful Use in Radiology
Meaningful Use in RadiologyMeaningful Use in Radiology
Meaningful Use in RadiologyCarestream
 

Similar to Cimo7e ppt ch02 (20)

Ehealthcaresystemshbemrpreppp 124794516192-phpapp01
Ehealthcaresystemshbemrpreppp 124794516192-phpapp01Ehealthcaresystemshbemrpreppp 124794516192-phpapp01
Ehealthcaresystemshbemrpreppp 124794516192-phpapp01
 
E healthcare systems Details
E healthcare systems DetailsE healthcare systems Details
E healthcare systems Details
 
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
 
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
Ehealthcaresystemshbemrpreppp 124794516192 Phpapp01
 
Midwest Regional Health - EHR
Midwest Regional Health - EHRMidwest Regional Health - EHR
Midwest Regional Health - EHR
 
Redspin February 17 2011 Webinar - Meaningful Use
Redspin February 17 2011 Webinar - Meaningful UseRedspin February 17 2011 Webinar - Meaningful Use
Redspin February 17 2011 Webinar - Meaningful Use
 
HIT - 2015 (3).ppt
HIT - 2015 (3).pptHIT - 2015 (3).ppt
HIT - 2015 (3).ppt
 
Electronic Medical Records and Meaningful Use
Electronic Medical Records and Meaningful UseElectronic Medical Records and Meaningful Use
Electronic Medical Records and Meaningful Use
 
ppt chp-1
ppt chp-1ppt chp-1
ppt chp-1
 
CHAPTER© 2012 The McGraw-Hill Companies, Inc. All rights r
CHAPTER© 2012 The McGraw-Hill Companies, Inc. All rights rCHAPTER© 2012 The McGraw-Hill Companies, Inc. All rights r
CHAPTER© 2012 The McGraw-Hill Companies, Inc. All rights r
 
HIPAA/HITECH Requirements for FQHCs and the New Omnibus Rule
HIPAA/HITECH Requirements for FQHCs and the New Omnibus RuleHIPAA/HITECH Requirements for FQHCs and the New Omnibus Rule
HIPAA/HITECH Requirements for FQHCs and the New Omnibus Rule
 
Comp8 unit2 lecture_slides
Comp8 unit2 lecture_slidesComp8 unit2 lecture_slides
Comp8 unit2 lecture_slides
 
Amy walker aami_%202011(7)
Amy walker aami_%202011(7)Amy walker aami_%202011(7)
Amy walker aami_%202011(7)
 
Chapter 17 Implementing and Upgrading an Information System Soluti.docx
Chapter 17 Implementing and Upgrading an Information System Soluti.docxChapter 17 Implementing and Upgrading an Information System Soluti.docx
Chapter 17 Implementing and Upgrading an Information System Soluti.docx
 
HIMSS16_IHE USA_Impact of IHE Profiles on Patient Care_Final-Full
HIMSS16_IHE USA_Impact of IHE Profiles on Patient Care_Final-FullHIMSS16_IHE USA_Impact of IHE Profiles on Patient Care_Final-Full
HIMSS16_IHE USA_Impact of IHE Profiles on Patient Care_Final-Full
 
Ehealth
EhealthEhealth
Ehealth
 
E-health appications
E-health appicationsE-health appications
E-health appications
 
Electronic Records
Electronic RecordsElectronic Records
Electronic Records
 
AAMI_HITECH MU: Impact on the Future of HC IT
AAMI_HITECH MU:  Impact on the Future of HC ITAAMI_HITECH MU:  Impact on the Future of HC IT
AAMI_HITECH MU: Impact on the Future of HC IT
 
Meaningful Use in Radiology
Meaningful Use in RadiologyMeaningful Use in Radiology
Meaningful Use in Radiology
 

Recently uploaded

Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 3652toLead Limited
 
Understanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitectureUnderstanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitecturePixlogix Infotech
 
Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?Mattias Andersson
 
SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024Scott Keck-Warren
 
My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024The Digital Insurer
 
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks..."LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...Fwdays
 
Snow Chain-Integrated Tire for a Safe Drive on Winter Roads
Snow Chain-Integrated Tire for a Safe Drive on Winter RoadsSnow Chain-Integrated Tire for a Safe Drive on Winter Roads
Snow Chain-Integrated Tire for a Safe Drive on Winter RoadsHyundai Motor Group
 
Pigging Solutions in Pet Food Manufacturing
Pigging Solutions in Pet Food ManufacturingPigging Solutions in Pet Food Manufacturing
Pigging Solutions in Pet Food ManufacturingPigging Solutions
 
APIForce Zurich 5 April Automation LPDG
APIForce Zurich 5 April  Automation LPDGAPIForce Zurich 5 April  Automation LPDG
APIForce Zurich 5 April Automation LPDGMarianaLemus7
 
Designing IA for AI - Information Architecture Conference 2024
Designing IA for AI - Information Architecture Conference 2024Designing IA for AI - Information Architecture Conference 2024
Designing IA for AI - Information Architecture Conference 2024Enterprise Knowledge
 
costume and set research powerpoint presentation
costume and set research powerpoint presentationcostume and set research powerpoint presentation
costume and set research powerpoint presentationphoebematthew05
 
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024BookNet Canada
 
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Patryk Bandurski
 
Bluetooth Controlled Car with Arduino.pdf
Bluetooth Controlled Car with Arduino.pdfBluetooth Controlled Car with Arduino.pdf
Bluetooth Controlled Car with Arduino.pdfngoud9212
 
Unleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubUnleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubKalema Edgar
 
Build your next Gen AI Breakthrough - April 2024
Build your next Gen AI Breakthrough - April 2024Build your next Gen AI Breakthrough - April 2024
Build your next Gen AI Breakthrough - April 2024Neo4j
 
Artificial intelligence in the post-deep learning era
Artificial intelligence in the post-deep learning eraArtificial intelligence in the post-deep learning era
Artificial intelligence in the post-deep learning eraDeakin University
 
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticsKotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticsAndrey Dotsenko
 
Scanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL CertsScanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL CertsRizwan Syed
 

Recently uploaded (20)

Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
 
Understanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitectureUnderstanding the Laravel MVC Architecture
Understanding the Laravel MVC Architecture
 
Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?
 
SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024
 
My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024
 
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks..."LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
 
Snow Chain-Integrated Tire for a Safe Drive on Winter Roads
Snow Chain-Integrated Tire for a Safe Drive on Winter RoadsSnow Chain-Integrated Tire for a Safe Drive on Winter Roads
Snow Chain-Integrated Tire for a Safe Drive on Winter Roads
 
Pigging Solutions in Pet Food Manufacturing
Pigging Solutions in Pet Food ManufacturingPigging Solutions in Pet Food Manufacturing
Pigging Solutions in Pet Food Manufacturing
 
APIForce Zurich 5 April Automation LPDG
APIForce Zurich 5 April  Automation LPDGAPIForce Zurich 5 April  Automation LPDG
APIForce Zurich 5 April Automation LPDG
 
Designing IA for AI - Information Architecture Conference 2024
Designing IA for AI - Information Architecture Conference 2024Designing IA for AI - Information Architecture Conference 2024
Designing IA for AI - Information Architecture Conference 2024
 
costume and set research powerpoint presentation
costume and set research powerpoint presentationcostume and set research powerpoint presentation
costume and set research powerpoint presentation
 
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
 
Hot Sexy call girls in Panjabi Bagh 🔝 9953056974 🔝 Delhi escort Service
Hot Sexy call girls in Panjabi Bagh 🔝 9953056974 🔝 Delhi escort ServiceHot Sexy call girls in Panjabi Bagh 🔝 9953056974 🔝 Delhi escort Service
Hot Sexy call girls in Panjabi Bagh 🔝 9953056974 🔝 Delhi escort Service
 
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
 
Bluetooth Controlled Car with Arduino.pdf
Bluetooth Controlled Car with Arduino.pdfBluetooth Controlled Car with Arduino.pdf
Bluetooth Controlled Car with Arduino.pdf
 
Unleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubUnleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding Club
 
Build your next Gen AI Breakthrough - April 2024
Build your next Gen AI Breakthrough - April 2024Build your next Gen AI Breakthrough - April 2024
Build your next Gen AI Breakthrough - April 2024
 
Artificial intelligence in the post-deep learning era
Artificial intelligence in the post-deep learning eraArtificial intelligence in the post-deep learning era
Artificial intelligence in the post-deep learning era
 
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticsKotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
 
Scanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL CertsScanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL Certs
 

Cimo7e ppt ch02

  • 1. CHAPTER © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2 The Use of Health Information Technology in Physician Practices
  • 2. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. Learning Outcomes When you finish this chapter, you will be able to: 2.1 Describe the functions of practice management programs. 2.2 Identify the core functions of an electronic health record system. 2.3 Discuss the advantages of electronic health records. 2.4 Describe the impact of health information technology on documentation and coding. 2.5 Discuss how the HIPAA Privacy Rule and Security Rule protect patient health information. 2.6 Explain how the measures put in place by the HITECH Act strengthen HIPAA privacy and security requirements. 2-2
  • 3. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. Key Terms • administrative safeguards • audit/edit report • audit trail • autoposting • breach • clearinghouse • CMS-1500 (08/05) • computer-assisted coding • electronic data interchange (EDI) 2-3 • electronic funds transfer (EFT) • electronic medical records (EMRs) • electronic prescribing • evidence-based medicine • health information technology (HIT) • HIPAA (Health Information Portability and Accountability Act of 1996)
  • 4. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. Key Terms (Continued) • HIPAA Electronic Transaction and Codes Sets standards • HIPAA Privacy Rule • HIPAA Security Rule • HITECH (Health Information Technology for Electronic and Clinical Health Act) • National Provider Identifier (NPI) 2-4 • personal health records (PHRs) • physical safeguards • protected health information (PHI) • technical safeguards • walkout statement • workflow • X12-837 Health Care Claim (837P)
  • 5. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.1 Functions of Practice Management Programs 2-5 • Health information technology (HIT) is a term used to refer to the computer hardware, software, and networks that are used to record, store, and manage patient health care information
  • 6. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.1 Functions of Practice Management Programs (Continued) 2-6 • Most offices use a practice management program (PMP) to complete routine office tasks, including: – Patient scheduling – Recording patient information – Creating and transmitting electronic claims – Receiving electronic payments – Billing patients – Creating financial reports – Collecting on overdue accounts
  • 7. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.1 Functions of Practice Management Programs (Continued) 2-7 • A clearinghouse is a company that collects electronic insurance claims from medical practices and forwards the claims to the appropriate health plans • An audit/edit report is sent from the clearinghouse to the practice, after the basic edit is complete
  • 8. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.1 Functions of Practice Management Programs (Continued) 2-8 • Reimbursement – A walkout statement lists the procedures performed, the charges for the procedures, and the amount paid by the patient – Autoposting is an automated process for entering information on a remittance advice (RA) into a computer
  • 9. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.2 Functions of Electronic Health Record Programs 2-9 • Electronic medical records (EMRs) are computerized records of one physician’s encounters with a patient over time • Personal health records (PHRs) are private, secure electronic files that are created, maintained, and owned by the patient • Electronic prescribing is the use of computers and handheld devices to transmit prescriptions to pharmacies in digital format
  • 10. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.2 Functions of Electronic Health Record Programs (Continued) 2-10 • Electronic health records (EHRs) may include information from multiple EMRs and have eight core functions: 1. Health information and data elements 2. Results management 3. Order management 4. Decision support 5. Electronic communication and connectivity 6. Patient support 7. Administrative support 8. Population reporting and management
  • 11. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.3 Advantages of Electronic Health Records 2-11 • Advantages of EHRs include: – Increased patient safety – Improved quality of care – Greater efficiency
  • 12. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.3 Advantages of Electronic Health Records (Continued) 2-12 • Evidence-based medicine refers to medical care that uses the latest and most accurate clinical research in making decisions about the care of patients • The Health Information Technology for Economic and Clinical Health Act (HITECH) is intended to promote the use of EHRs in physician practices and hospitals through the use of financial incentives
  • 13. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.4 The Impact of HIT on Documentation and Coding 2-13 • A Workflow is a set of activities designed to produce a specific outcome • The process of assigning preliminary diagnosis and procedure codes with a computer is known as computer-assisted coding
  • 14. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.4 The Impact of HIT on Documentation and Coding (Continued) 2-14 • Impact of HIT on Documentation and Coding – Every service must be documented in order to receive reimbursement – Incomplete or incorrect documentation may result in claim denials or even a federal investigation – All codes should be reviewed to ensure accuracy
  • 15. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.5 HIPAA Legislation and its Impact on Physician Practices 2-15 • The Health Insurance Portability and Accountability Act of 1996 (HIPAA) contains a number of rules, including: – HIPAA Electronic Transaction and Code Sets standards – HIPAA Privacy Rule – HIPAA Security Rule – Final Enforcement Rule
  • 16. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.5 HIPAA Legislation and its Impact on Physician Practices (Continued) 2-16 • HIPAA Electronic Transaction and Code Sets standards – Describe an electronic format that providers and health plans must use to send and receive health care transactions – The electronic transmission of data is called electronic data interchange (EDI) – Payment may be via electronic funds transfer (EFT)
  • 17. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.5 HIPAA Legislation and its Impact on Physician Practices (Continued) 2-17 • Claim Formats – The HIPAA-standard X12-837 Health Care Claim, or 837P – The CMS-1500 (08/05) paper claim • The National Provider Identifier (NPI) is a ten- position numerical identifier consisting of all numbers
  • 18. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.5 HIPAA Legislation and its Impact on Physician Practices (Continued) 2-18 • HIPAA Privacy Rule – Protects individually identifiable health information – Mandates rules all covered entities must follow in protecting patients’ privacy – Information that can be used to find out a person’s identification, is referred to as protected health information (PHI)
  • 19. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.5 HIPAA Legislation and its Impact on Physician Practices (Continued) 2-19 • HIPAA Security Rule – Outlines safeguards to protect health information stored on a computer system or transmitted across computer networks – Administrative safeguards: the policies and procedures that protect electronic health information – Physical safeguards: the mechanisms required to protect electronic systems, equipment, and data – Technical safeguards: the automated processes used to protect data and control access to data • An audit trail is a report that shows who has accessed information and when
  • 20. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.5 HIPAA Legislation and its Impact on Physician Practices (Continued) 2-20 • HIPAA in the Age of Health Information Technology – A breach is the acquisition, access, use, or disclosure of unsecured PHI in a manner not permitted under the HIPAA Privacy Rule
  • 21. © 2011 The McGraw-Hill Companies, Inc. All rights reserved. 2.6 The HITECH Act’s Impact on Privacy and Security 2-21 • The HITECH Act introduced additional privacy and security regulations, including: – Breach notification – Monetary penalties – Advanced enforcement

Editor's Notes

  1. Teaching Notes:   Have students define all key terms as an assignment. Then, in class, ask each student to define one key term aloud.   Optional assignment: Have students do an Internet search of one key term and write a short paragraph describing what they learned about that term from looking at a few websites.
  2. Teaching Notes:   Have students define all key terms as an assignment. Then, in class, ask each student to define one key term aloud.   Optional assignment: Have students do an Internet search of one key term and write a short paragraph describing what they learned about that term from looking at a few websites.
  3. Learning Outcome: 2.1 Describe the functions of practice management programs. Pages: 28-32 Teaching Notes: AHIMA is one of the groups that sets standards for management of HIT. http://www.ahima.org/ American Health Information Management Association.
  4. Learning Outcome: 2.1 Describe the functions of practice management programs. Pages: 28-32 Teaching Notes: Many offices now use Electronic Medical Records which merge the front office computer software with the patient treatment information. Stress that an EMR is different from a PMP. If an office has used a PMP, then goes from paper to EMR, the person supervising the change must make sure that the two programs can communicate with each other. Medisoft is a PMP. It is actually used in physician’s offices in the real world. Using a PMP helps save time and eliminate errors. Large corporations usually use the same PMP throughout their system as well as tying that PMP to the computers in the hospital. This allows the physician to access information from hospital admissions. Scheduling is easier, patient information input has less errors. Claims are submitted faster and money received faster. Patients account are easy to track. Financial reports can be pulled to justify purchases, staffing etc.
  5. Learning Outcome: 2.1 Describe the functions of practice management programs. Pages: 28-32 Teaching Notes: There is a charge for handling practice management services. There are several companies that a practice can choose. Clearinghouses standardize claims and perform a detailed edit of the information making sure a claim is “clean,” meaning it is free of errors and has no missing information. This facilitates expedited payment from the insurance company. A report, the audit/edit is sent to back to the practice stating the claim is either clean and it will be forwarded to the insurance company or that it contains errors and those errors are identified so the practice can correct them. Once corrected, the claim must be resent to the clearinghouse to be reviewed again.
  6. Learning Outcome: 2.1 Describe the functions of practice management programs. Pages: 28-32 Teaching Notes: Although most offices file insurance for patients, they still need a walkout receipt. They may participate in a flexible spending plan and want to get reimbursed for their copay and/or coinsurance. Autoposting saves time but the RA still needs to be reviewed to identify payments that are not as expected.
  7. Learning Outcome: 2.2 Identify the core functions of an electronic health record system. Pages: 32-38 Teaching Notes: EMR’s are different from a PMP. They can include information from other places where the patient has been seen, such as laboratories, hospitals, pharmacies etc. A lot of hospitals now use hospitalists to take care of patients when they are admitted to the hospital instead of the patient’s primary physician. EMR’s allow the patient’s personal physician to access the information from a hospital visit when the patient is in the office for a follow-up appointment. PHR’s are the information contained in the EMR. This is the information that you must have permission to release from the patient. Information comes from multiple providers and facilities. Electronic prescribing is part of order management. It also helps save time and increase accuracy.
  8. Learning Outcome: 2.2 Identify the core functions of an electronic health record system. Pages: 32-38 Teaching Notes: The following EHR functions are suggested by the Institute of Medicine Key Data-Problem List, procedures, medication lists, allergies, medication list, allergies, demographics, diagnostic test results, health maintenance, advance directives. Clinical and Patient Narrative-signs and symptoms, diagnosis, procedures, level of service, treatment plan. Results reporting, results notification, multiple views of data/presentation, multimedia support (images, scanned documents) Computerized provider order entry(CPOE)-electronic prescribing, laboratory, pathology, x-rays, consultations Access to knowledge sources, drug alerts, reminders, clinical guidelines and pathways, chronic disease management, clinician work list, diagnostic decision support, use of epidermiologic data, automated real-time surveilance Provider-provider, team coordination, patient-provider, medical devices external partners (pharmacy, insurer, laboratory, radiology) integrated medical record (within setting, across settings, inpatient-outpatient Patient education (access to patient education materials), family and informal caregiver education, data entered by patient, family, and/or informal caregiver (home monitoring, questionnaires) Scheduling management (appointments, admissions, surgery and other procedures), eligibility determination (insurance, clinical trials, drug recalls, chronic disease management) Patient safety and quality reporting, public health reporting, disease registries.
  9. Learning Outcome: 2.3 Discuss the advantages of electronic health records. Pages: 39-41 Teaching Notes: Safety: medication and physician orders (illegible handwriting), electronic alerts allergies and drug reactions, alerts to physicians, record preservation, timely communication of information Quality: reminders for patients for preventative care and screenings, patients w/chronic illnesses can monitor from home via internet Efficiency: retrieval of information is immediate--essential in critical care situations, also increases efficiency of workflow, refilling of prescriptions, receiving payments, organization of the record and prevents loss of records.
  10. Learning Outcome: 2.3 Discuss the advantages of electronic health records. Pages: 39-41 Teaching Notes: EHR’s facilitate evidence-based medicine by allowing physicians to share information quickly HITECH is part of the American Reinvestment and Recovery Act of 2009, provider must show “meaningful use” of the EHR to qualify for the incentives.
  11. Learning Outcome: 2.4 Describe the impact of health information technology on documentation and coding. Pages: 41-44 Teaching Notes: Electronic workflow is most efficient when the PMP and EHR being integrated in an office can easily exchange data with each other. It is always the goal to increase office efficiency. Computer-assisted coding: Some programs assign codes based on keywords in a template, others analyze words, phrases, and sentences in the electronic documentation. They still need to be reviewed for accuracy before filing the claim.
  12. Learning Outcome: 2.4 Describe the impact of health information technology on documentation and coding. Pages: 41-44 Teaching Notes: Discuss the importance of accuracy and compliance in documentation and coding.
  13. Learning Outcome: 2.5 Discuss how the HIPAA Privacy Rule and Security Rule protect patient health information. Pages: 44-51 Teaching Notes: Have students discuss scenarios that might compromise HIPAA privacy rules. Examples: Talking to friends about patients, talking on the phone to a patient within earshot of other patients.
  14. Learning Outcome: 2.5 Discuss how the HIPAA Privacy Rule and Security Rule protect patient health information. Pages: 44-51 Teaching Notes: HIPAA Electronic Transaction and Code Sets Standards: Purpose is to reduce administrative costs and complexities by requiring use of standardized electronic formats for transmission of data. EDI involves sending information from computer to computer using publicly available communications protocols. EFT puts money directly into a designated bank account
  15. Learning Outcome: 2.5 Discuss how the HIPAA Privacy Rule and Security Rule protect patient health information. Pages: 44-51 Teaching Notes: Claim formats 837P professional claim CMS 1500- some small offices are exempt from HIPAA requirement to send electronic claims so they use this paper form NPI-any individual or health care provider must have an NPI
  16. Learning Outcome: 2.5 Discuss how the HIPAA Privacy Rule and Security Rule protect patient health information. Pages: 44-51 Teaching Notes: Covered entities (health plans, health care clearinghouses, and health care providers and their businesses associates) must follow all rules. -adopt a set of privacy practices -notify patients about their privacy rights -train employees so they understand privacy practices -appoint a staff member to be privacy official -secure patient records
  17. Learning Outcome: 2.5 Discuss how the HIPAA Privacy Rule and Security Rule protect patient health information. Pages: 44-51 Teaching Notes: 3 categories of security standards Administrative is assigned to one person Physical threats include hackers, disgruntled employees, or angry patients. Unauthorized intrusion is access by individuals who do not have a “need to know” Technical access is granted on a “need to know” basis. Passwords are designed to allow customized access.
  18. Learning Outcome: 2.5 Discuss how the HIPAA Privacy Rule and Security Rule protect patient health information. Pages: 44-51 Teaching Notes: HIPAA enacted 1996 While the proliferation of health information networks provide many points of access to patient information, it also increases the possibility of unauthorized access.
  19. Learning Outcome: 2.6 Explain how the measures put in place by the HITECH Act strengthen HIPAA privacy and security requirements. Page: 51 Teaching Notes: Breach notification: Requires notification of patients by covered entities of any breach of information. Also must notify the federal government and the media Monetary penalities: Penalities for breaches ranging from $100-$50,000 Advanced enforcement: Office of Civil Rights is required to conduct audits to ensure compliance with HIPAA rules