The document discusses patient confidentiality training requirements under HIPAA. It provides an overview of what HIPAA is, what protected health information it covers, penalties for violations, who must be trained, and training frequency. HIPAA protects individually identifiable health information held by covered entities. It defines protected health information and provides examples of common identifiers covered. Penalties for violations can include fines up to $50,000 and imprisonment, depending on factors like willful neglect. All employees with access to patient information must be trained initially and annually.

1. Patient Confidentiality
Training
NADIA ROWELL
MHA 690
INSTRUCTOR - DR. DAVID S. COLE
JULY 24, 2014

2. Agenda
 What is HIPAA
 What is Protected by HIPAA
 HIPAA Penalties
 Who is Required to Train?
 How Often is Training Required?
 Type of Training

3. Health Insurance Portability and
Accountability Act (HIPAA)
 The HIPAA Privacy Rule provides federal
protections for individually identifiable health
information held by covered entities and their
business associates and gives patients an array of
rights with respect to that information

4. What is Protected by HIPPA
 Protected Health Information. The Privacy Rule protects
all "individually identifiable health information" held or
transmitted by a covered entity or its business
associate, in any form or media, whether electronic,
paper, or oral. The Privacy Rule calls this information
"protected health information (PHI)."
 Individually identifiable health information includes
many common identifiers (e.g., name, address, birth
date, Social Security Number

5. HIPAA Penalties
 Penalties will vary significantly depending on factors
such as the date of the violation, whether the covered
entity knew or should have known of the failure to
comply, or whether the covered entity’s failure to
comply was due to willful neglect.
 A person who knowingly obtains or discloses
individually identifiable health information in violation
of the Privacy Rule may face a criminal penalty of up to
$50,000 and up to one-year imprisonment

6. Who is Required to Train?
All employees who have
access to patient
information.

7. When is Training required?
 Employee Orientation
 Training is required Annually

8. REFERENCES
 U.S. Department of Health and Human Services . Retrieved
July 24, 2014 from
http://www.hhs.gov/ocr/privacy/hipaa/understanding/summa
ry/index.html