HIPAA requires all healthcare providers to protect patients' privacy, confidentiality, and security of their health information. It applies to doctors, hospitals, insurance companies, and any organization that handles protected health information (PHI). PHI includes information about a person's health, treatments, payments and identifying details. Violations of HIPAA can result in civil penalties up to $250,000 and jail time of up to 10 years, depending on the type of violation. Healthcare workers must only access health records they are authorized to see and keep all PHI private and confidential.

1. HIPAA: Privacy, Confidentiality, and Security Presented by: Libby Goodman

2. What is HIPAA? HIPAA stands for the Health Insurance Portability and Accountability Act of 1996. It is a law that requires all healthcare providers to promise the privacy, confidentiality and security of the health information of every person. Patients have the right to this.

3. Who has to follow the HIPAA rules? Health care providers, including doctors, dentists, chiropractors, therapists, hospitals, nursing facilities, clinics, pharmacies, home health agencies, hospices, long-term care facilities, and personal care facilities of any type or size. Health plans and health insurance companies. Healthcare clearinghouses, such as billing services. You must follow HIPAA rules.

4. What kind of information does HIPAA protect? Information about the person’s past, present or future health condition, health treatment, or payment of healthcare services. Information that identifies you, or tells who you are such as name, phone, address, DOB, diagnosis, SS #, employer, position or other identifying data. Protected Health Information (PHI) comes in many formats – commonly paper, electronic, or conversation.

5. Exceptions to HIPAA rule… Emergencies Public health needs, such as infectious diseases Mandatory reporting of a child orelder abuse and neglect Judicial (court) and administrative (insurance companies) proceedings

6. Ways you can protect patients’ privacy and confidentiality: Confidentiality of all health information Always treat resident/patient records as confidential Know your workplace rules related to PHI Everyone has the right to decide who has access to their health information Only authorized staff areallowed to view health information Do not include casual notes in a patient’s chart Do not let unauthorized people hear or see another person’s PHI

7. HIPAA violations can cost you! Single violation= $100 civil money penalty Multiple violations of an identical requirement or prohibition made during a calendar year = up to $25,000 Wrongful disclosure of individually identifiable health information = up to $50,000 & up to one year jail time Wrongful disclosure of individually identifiable health information committed under false pretenses = up to $100,000 & up to 5 years jail time Wrongful disclosure of individually identifiable health information committed under false pretenses with intent to sell, transfer or use for commercial advantage, personal gain or malicious harm = up to $250,000 & up to 10 years jail time

8. Examples of what is NOT okay… Reviewing a medical record for no reason Even if it is someone famous, it is not acceptable to view a medical record without authorization. It may seem that the public is aware of their personal details, but the information in the public is often not correct and PHI details are never okay to review or discuss unless you are an authorized to view it or know it.

9. Protecting privacy is best policy Keep in mind how you would want others to handle your PHI. Treat your patient’s PHI with the same respect you would want for your own.

10. Thank you! Questions, please contact your supervisor or the Health Information Management Department.