HIPAA training is provided to employees to ensure compliance with privacy rules regarding protected health information (PHI). HIPAA protects the privacy of patient health information and regulates how PHI can be accessed and shared. The training explains what constitutes PHI, employee responsibilities for securing PHI, policies for electronic records, reporting violations, and penalties for non-compliance. Employees are tested on examples of HIPAA violations like discussing patients in public areas, accessing their own records without authorization, and failing to log out of medical systems properly.

1. CONFIDENTIALITY AND HIPPA EMPLOYEE TRAINING
OPEN WITH EXTREME CAUTION

2. What is HIPPA and why is it important?
HIPPA stands for The Health Insurance Portability and Accountability Act.
This act created in 1196 protects the privacy of health Information.
HIPPA is important to the workplace because it ensures that employee
health information is not provided to parties, such as employers, without
the consent of employees. This rule applies to patients also.
Training is provided to employees to facilitate compliance and ensure
appropriate access and provide guidelines for violations.

3. • Explain what protected health information (PHI) is and how
it is to be secured.
•Explain the duties and responsibilities in complying with
HIPPA.
•Explain how PHI is to be secured.
•Explain the privacy and security issues when creating,
maintaining and transmitting information electronically.
•Explain employee HIPPA violation reporting guidelines and
HIPPA violation penalties.

4.  Follow all rules for securing your password.
Follow all employer required policies and
procedures as it relates to medical record
access.
Only access PHI on a need to know basis in
order to perform job duties.
Employees may not access their own record
or family member’s record.
Report any suspected violation immediately.

5. PHI in open view should be covered.
Conversations about patients should be held in private areas.
Do not discuss patients in common areas such as elevators, cafeterias,
rest room etc…
PHI not in use should be placed in secured rooms or drawers.
PHI should not be left on copier and fax machines for extended
periods.
Properly discard PHI in shred bins or locked recycle rooms.

6. TEST
YOUR
HIPPA
KNOWLEDGE

7. WHILE IN A PUBLIC ELEVATOR YOU HEAR
CO-WORKERS DISCUSSING PATIENT
INFORMATION…SHOULD YOU?
A. Add to the story with what you
know about the patient.
B. Try to change the conversation.
C. Yell at the employees to be
quiet.
D. Mention HIPPA rules and not the
names of the employees to
report the incident
E. Exit the elevator and hope for
the best.
The Correct
Answer: D

8. You attempt to log in and
notice the previous user
did not log out properly.
What should you do?
A. Use the current sign-on since it is
already on.
B. Look up all the information you
want since it’s under someone
else's id.
C. Send out funny email blasts.
D. Log the user out and sign-in under
your user ID. Correct Answer: D

9. HIPPA
 Level & Definition of
Violation
 Negligent-Accidental
and/or due to lack of
proper education
HIPPA
 Possible Action
 Retraining &
reevaluation
 Verbal warning with
discussion of policy,
procedures and
requirements
 Written Warning

10. HIPPA HIPPA
 Level & Definition of
Violation.
 Purposeful-Purposeful
violation of privacy policy
with or without associated
potential for patient harm
or failure to respond to
coaching and discipline
provided in response to
previous violations of
privacy policies.
 Retraining and
reevaluation
 Verbal Warning
 Written warning with
discussion of policy,
procedures and
requirements.
 Termination

11. A major goal of HIPPA is to assure that individuals’
health information is properly protected while
allowing the flow of health information needed to
provide and promote high quality health care and
to protect the public's health and well being.
The Rule strikes a balance that permits important
uses of information, while protecting the privacy
of people who seek care and healing. Given that
the healthcare marketplace is diverse, the Rule is
designed to be flexible and comprehensive to
cover the variety of uses and disclosures that
need to be addressed.

12. U. S. Department of Health & Humans Services. (2012). Health
Information Privacy. Retrieved from
http://www.hhs.gov/ocr/privacy/hippa/understaning/consumers/inde
x.html