HIPAA is a federal law that requires the protection of sensitive patient health information. It established national standards to protect patients' medical records and other personal health information from being disclosed without consent or knowledge. The U.S. Department of Health and Human Services issued rules under HIPAA, including the Privacy Rule and Security Rule, which protect health information and set guidelines for how it can be collected, used, and shared. HIPAA gives patients more control over their information and defines penalties for any violations of its standards.

1. What is HIPPA
• The Health Insurance Portability and Accountability Act of 1996
(HIPAA) is a federal law that required the creation of national
standards to protect sensitive patient health information from being
disclosed without the patient’s consent or knowledge. The US
Department of Health and Human Services (HHS) issued the HIPAA
Privacy Rule to implement the requirements of HIPAA. The HIPAA
Security Rule protects a subset of information covered by the Privacy
Rule.

2. What is HIPAA?
Health Insurance Portability and Accountability Act of 1996
• Limits how we use and share patient
information
• Gives patients more control over their
information
• Protects the integrity, availability and
confidentiality of patient information
• Defines violation penalties

3. Patient Rights
Patients have the right to:
• Receive a Notice of Privacy Practices that
describes how we use and share their information
• Review and obtain copies of their medical and
financial records
• Request corrections if they believe information is
incorrect
HIPAA regulations provide individuals with
certain rights that are reflected in VUMC policy.

4. What is Protected under HIPAA?
• Individually identifiable health
information collected from an individual
that is created or received by a health
care provider, employer, or plan.
• In any form: written, verbal, electronic
• Information pertaining to HIV, alcohol
and drug treatment, psychotherapy
notes, etc. have even more stringent
protections.

5. Top 10 Points of HIPPA violation
 Email protection
 End Point Protection
 Access Management
 Data Protection
 Asset Management
 Network Management
 Vulnerbility Management
 Incident Management
 Medical device security
 Cyber security Policy