The document discusses rules around protecting patient privacy and health information, including: - The HIPAA Privacy Rule, which protects individually identifiable health information. - The HIPAA Security Rule, which sets national standards for securing electronic protected health information. - The HIPAA Breach Notification Rule, which requires notification if unsecured protected health information is breached. - Training should be provided yearly to all employees, including clinical and administrative staff, on HIPAA regulations and privacy procedures. Compliance is enforced by educating staff on rules and policies and ensuring authorized access to patient information.

1. Confidentiality
Instructor: Hwang-Ji, Lu
MHA690
Mary Whalem
11/14/2013

2. HIPPA PRIVACY RULES
The Office for Civil Rights enforces the HIPAA Privacy Rule, which protects the
privacy of individually identifiable health information; the HIPAA Security Rule,
which sets national standards for the security of electronic protected health
information; the HIPAA Breach Notification Rule, which requires covered entities
and business associates to provide notification following a breach of unsecured
protected health information; and the confidentiality provisions of the Patient
Safety Rule, which protect identifiable information being used to analyze patient
safety events and improve patient safety.

3. Patient safety
• HIPPA, it
protects the privacy of patient/individuals health information; it
sets a national standards for security of electronic health information and
requires business associates to give notification if a breach of unsecured
protected health information and confidentiality of the Patient Safety is
released in the wrong hands or by word of mouth
• HHS published a final Security Rule in February 2003. This Rule sets national
standards for protecting the confidentiality, integrity, and availability of
electronic protected health information. Compliance with the Security Rule
was required as of April 20, 2005 (April 20, 2006 for small health plans).

4. Who should be included in training
All employees including:
Nursing staff
Clinical staff
CEO
Management
Administration
New-hires
Physicians

5. When and places to train
Yearly classes
Follow-up on HIPPA regulations and policies
Privacy procedures (new rules add on).
A follow-up survey to determine areas most effective and need close monitoring.
Training program that are very effective, reliable, and valid.
Continuing Medical Education (CME) credits for physicians and Continuing
Education (CE) credits for health care professionals.

6. How training is enforced
Employees with patients, personal, and sensitive information who has
knowledge about the rules, regulation, and policies of HIPPA.
 HIPPA training will help staff members identify authorized people who can
legally access patient information.
Educating all staff on the importance of
HIPPA’s regulations and policies by
following up and checking that the staff is in compliance.
 A responsive communication process to address questions that arise after
training and in an ongoing manner.

7. Key Elements of Privacy Rule
• Provide strong Federal protections for privacy rights
• Preserve quality health care

8. HHS Secretary Thompson
August 14, 2002
The Privacy Rule “strikes a common sense balance by providing consumers
with personal privacy protections and access to high quality health care.”

9. Reference
• Health Information Privacy . (2013). Retrieved from HHS.gov:
http://www.hhs.gov/ocr/privacy/