The document discusses the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rules, which offer federal protections for personal health information (PHI). It notes that HIPAA gives patients rights over their PHI and that violations can result in criminal prosecution and penalties. It then provides an example where over 120 hospital workers in Los Angeles improperly accessed celebrity medical records. The document concludes by recommending ways for organizations to educate their workforce on HIPAA, including forming an internal committee, developing training platforms, ensuring accountability, and testing competencies.

1. Benjamin W. Myrstol
MHA690: Health Care Capstone
Professor Lu
August 7, 2014

2. Health Insurance Portability and
Accountability Act of 1996
HIPAA Privacy Rules offer federal protections
for personal health information (PHI)
Gives patients an assortment of rights with
respect to PHI

3. A Privacy Rule infraction can be considered
criminal and may lead to prosecution
Penalties can be financially and professionally
shattering
Ethical issues surrounding HIPAA can also be
damaging
HIPAA protects patient’s personal health
information

4. More than 120 workers at a Los Angeles
hospital looked at celebrities' medical records
and other personal information without
permission between January 2004 and June
2006
State officials accused the hospital of not
taking adequate steps in maintaining patient
confidentiality
Educate the workforce on the importance and
impact of HIPAA

5. Governance:
◦ Build internal governance surrounding HIPAA
Committee:
◦ Form a committee to specialize in HIPAA and build
training materials for implementation
Internal Change Control:
◦ Onboarding of leaders and managers

6. Platform:
◦ Develop a platform for the workforce to be
educated (i.e. classroom or online training)
Accountability:
◦ Ensure accountability for training in each area with
formal corrective action for not participating
Competencies:
◦ Develop competency testing

7. Comprehend the principles of HIPAA
Recognize why HIPAA is important
Understand PHI and how to protect it
Recognize the ethical matters surrounding
HIPAA
Internalize and recognize the role each
member plays

8. Fox News. (2008, August). Report: Over 120 UCLA hosptial staff saw celebrity health records.
Retrieved August 7, 2014, from Fox News:
http://www.foxnews.com/story/2008/08/06/report-over-120-ucla-hospital-staff-saw-
celebrity-health-records/
HIPAA.com. (2013). The reality of hipaa violations and enforcement. Retrieved August 7, 2014,
from HIPAA.com: http://www.hipaa.com/2013/10/the-reality-of-hipaa-violations-and-
enforcement/
U.S. Department of Health & Human Services. (2013, February 26). What is phi? Retrieved
August 7, 2014, from HHS.gov: http://answers.hhs.gov/questions/8380