This document discusses patient confidentiality and privacy protections under HIPAA. It outlines patients' rights to private medical records and notification of breaches. HIPAA established federal protections for individual health information and charges DHHS and CMS with enforcing privacy and security standards. Violations can result in penalties up to $1.5 million and prison time. Medical records may only be accessed for treatment, billing, auditing, or healthcare operations. Security measures like passwords, audits, and virus software help ensure compliance. Reviewing patient records must follow HIPAA guidelines.

1. CONFIDENTIALITY
MHA 690: HEALTH CARE CAPSTONE
GARY GROOM
DR. HWANG-JI LU
SEPTEMBER 26, 2013

2. PATIENT’S RIGHTS
 Every Patient has the right to privacy
 Secure Electronic Medical Records
 Secure written medical information
 Notified of breaches
(U.S. Department of Health & Human Services, 2013)

3. HIPAA
 HIPAA- Health Insurance Portability and
Accountability Act (1996)
• Federal protection of individual health
information whether written, electronic, or oral.
• DHHS Office for Civil Rights enforces privacy
standards
• CMS enforces security standards
(U. S. Department of Health and Human Services, 2013)

4. HIPAA VIOLATIONS
 American Recovery and Reinvestment Act of
2009 established penalty structure
 Penalties Range
 $100- $1.5 Million
 Prison Time: 1- 10 Years
(American Medical Association, 2013)

5. CONCLUSION
 Accessing Patient Information
 When Treating Patient
 Billing Patients
 Auditing
 Healthcare Operations

6. CONCLUSION
 Security
 Password protected software
 Semi-annual auditing of records
 Virus Software

7. CAUTION
 Reviewing a Patient’s Medical Records must
be done in accordance with HIPAA.
 Make sure you are aware of HIPAA laws

8. REFERENCES
 American Medical Association. 2013. HIPAA Violations and
Enforcement. Retrieved from http://www.ama-
assn.org//ama/pub/physician-resources/solutions-managing-your-
practice/coding-billing-insurance/hipaahealth-insurance-portability-
accountability-act/hipaa-violations-enforcement.page
 U.S. Department of Health and Human Services. 2013. Health
Information Privacy. Retrieved from
http://www.hhs.gov/ocr/privacy/index.html