Confidentiality refers to keeping patient information private. The HIPAA Privacy Rule establishes national standards to protect individuals' medical records and personal health information. It requires safeguards to protect privacy and sets limits on uses and disclosures of information without patient authorization. Patients have rights over their health information including access and corrections. Information can only be viewed with patient permission or when necessary for treatment or billing. Only staff involved in a patient's care or billing may view information. Identifiable patient information like names, social security numbers must be protected. When in doubt, do not release information and obtain written consent. Violations of confidentiality can result in fines or jail time. Healthcare organizations must take measures to ensure patient information privacy.

1. L E T A R I U S L E E
M H A 6 9 0
I N S T R U C T O R : S H E R R I E L U
M A R C H 5 , 2 0 1 5
Confidentiality Training

2. What is confidentiality?
 Confidentiality is having trust of confidence that
information is kept private. The information can be
spoken, written, or acted.

3. HIPAA Privacy Rule
“The HIPAA Privacy Rule establishes national
standards to protect individuals’ medical records and
other personal health information and applies to health
plans, health care clearinghouses, and those health care
providers that conduct certain health care transactions
electronically. The Rule requires appropriate safeguards
to protect the privacy of personal health information, and
sets limits and conditions on the uses and disclosures
that may be made of such information without patient
authorization. The Rule also gives patients rights over
their health information, including rights to examine and
obtain a copy of their health records, and to request
corrections” (hhs.gov).

4. When can information be view?
 Information can be viewed when permission in given
by patient
 Information can only be viewed when it is necessary.
 Information can only be viewed when it involves care
to the patient

5. Who can view patient’s information?
 A patient’s information can only be viewed be the
staff that is involved in the treatment or billing of the
patient. If the staff has no involvement in the
treatment or in the billing process of that patient this
is a violation on HIPAA regulations.

6. Information to Protect
 Patient’s name
 Family’s name
 Social Security Number
 Identifiable information

7. When in Doubt
 Do not release information
 Obtain written consent
 Avoid conversation about patients
 Avoid comments that could be heard by those not
involved in a patients treatment or care

8. What to know..
 If a staff member knows information is not handled
properly report it.
 Each time the information is view inappropriately
this is a violation
 Violations can result in fines, jail time, firing,
suspensions

9. Conclusion
Any information that pertains to a patient should
be protected by the healthcare organization. The
information can come in any form spoke, written,
electronically. It is the responsibility of the
organization to take every measure to ensure the
safety of the patients.

10. References
 hhs.gov. (n.d.). The privacy rule . Retrieved March
4, 2015 from
http://www.hhs.gov/ocr/privacy/hipaa/administrati
ve/privacyrule/