HIPAA Workforce Training1.pdf

7/27/2019 HIPAA Workforce Training1.pdf

1/48

HIPAAWorkforce Training

The Health Insurance Portability &Accountability Act (HIPAA) requires thatthe University train all workforcemembers about the Universitys HIPAA

Policies and those specific HIPAA-required procedures that may affect the

work you do for the University.

Click the arrow to start the YouTube video in a separate window.Note: Once the video is playing, navigate through the presentation

by first clicking on this slide, then by using the Page UpandPageDownkeys to navigate as the video plays.
http://youtu.be/zK9lK1-39Tw


2/48

HIPAA Training Categories:HIPAA requires that we document that everyone receives training. Please

complete the following information. Check all the categories that apply to the work

you do for the University so that we can match you with the correct education

program.

Name____________________ Employee ID_______________Please check all those categories that best describe what you do (othercategories on the next slide).

1. Health Care Providers and Trainees:people with patient care

responsibility or those who are training to provide patient care (e.g.,physicians, nurses, physical therapists, pharmacists, professionalswho provide therapeutic, counseling, rehabilitative or palliative careand UC and non-UC health professional trainees.

2. Research: people who use and create patient information inconnection with research (e.g., including physician researchers andstaff, IRB administration and staff)

3. Patient Information Management:people with responsibility formanaging patient information and records (e.g., medical records,billing, admissions, financial eligibility, managed care, and patientrelations)


3/48

Please check all categories that apply to thework you do for the University.

4. Administration, Business, Financial, HR, Benefits and Legal:peoplewho provide administrative, business, legal and financial support andservices

5. Purchasing and Contracting: people who negotiate contracts and

services with outside vendors

6. External Relations and Institutional Advancement: people who haveresponsibility for public and media relations, fundraising, developmentand other communications with the public about the University

7. All Other Employees or Volunteers: people who work in a broadrange

of jobs that provide important services to support the Universitysmission and take care of the public and patients, including cafeteria anddietary staff, environmental and housekeeping services, laundryservices, gift shop salespeople, patient escorts and information deskclerks and University volunteers


4/48

This HIPAA Training Programwill help you understand

Whatis HIPAA?

Who...has to follow the HIPAA law?

Whendo we start?How...does HIPAA affect you and your job?

Why..is HIPAA important

Wherecan you get help with HIPAA?


5/48

What is HIPAA?

HIPAA is the Health Insu rancePortabi l i ty and A ccoun tabi l i ty Ac t, afederal law that

Protects the privacy of a patients personaland health information

Provides for electronic and physical securityof personal and health information

Simplifies billing and other transactions


6/48


7/48

What Patient Information MustWe Protect?

We must protect an individuals personaland health information that:

Is created, kept, filed, used or shared

Is written, spoken, or electronic

HIPAA says that this information isPro tected Health In fo rmation (PHI).


8/48


9/48


10/48


11/48

For many other uses anddisclosures of PHI

UC must get a

signedauthorizat ionfrom the patient.

(e.g., to disclose PHI to the media)


12/48

HIPAA Requiresthe University to:

Give each patient a Notice of Privacy Pract icesthatdescribes:

How the University can use and share his or herprotected health information (PHI)

A patients privacy rights

Ask every patient to sign a written acknowledgmentthat he/she received the Notice of Privacy Pract ices


13/48

The Notice ExplainsWhat UC Can Do With PHI

You can call the UCSC Medial Records SupervisorRecords at 459-3327 or the UCSC HIPAA Privacy

Liaison at 459-2666 to ask questions or get a copy ofthe Notice:

The Notice of Privacy Pract icesis linkedon the Health Center website:

www2.ucsc.edu/healthcenter


14/48


15/48


16/48

When Can You Use PHI?

Only to do your job !

At all other times, protecta patients information

as if it were

you r own informat ion!


17/48

You May

Lookat a persons PHI only ifyou need it to do your job

Usea persons PHI only if you

need it to do your job

Givea persons PHI to otherswhen it is necessary for them todo their jobs.

Talkto others about a personsPHI only if it is necessary to doyour job


18/48

HIPAA Story

I wo rk in admit t ing. A fr iend who works in the ER to ld me

that she just saw a famous movie star get on the elevatorwi th some men who looked l ike body guards. My fr iend is

cur io us abou t this famous person . She read in the paperthat the actress has cancer. My fr iend asked me to f indout w hat f loor the star is on because we know thenumbers of the cancer f loors .

What harm can it do? my friend asks.


19/48


20/48

How Do I KnowIf HIPAA Affects My Job?

Your supervisor or manager may give you more HIPAA Privacytraining and written information that describes how HIPAA affectsyour job

If you have questions about what you must do, ask yoursupervisor,

OR

Contact the Medical Records Administrator (459-3327) or the UCSCHIPAA Privacy Liaison (459-2666)


21/48


22/48


23/48


24/48

And UC is Serious About

Protecting Our Patients Privacy!

Someone who does not protect a patientsprivacy could lose his or her job, pay finesor even go to jail

Fines are $50,000 to $250,000

Jail terms are up to ten years


25/48


26/48

HIPAA asks

Did you need to read the lab results to do your job?

Is it your job to provide a patient with her health informationevenif the individual is a friend or fellow employee?

Is it your job to let other people know an individuals test results?

Should a University employee look at another employees medicalinformation?

How would you feel if this had happened to you?

Do not look at, read, use or tel l others about anindividuals information (PHI) unless it is a part ofyour job.

Protecting Patient Privacy


27/48

Protecting Patient PrivacyRequires Us to

Secure Patient InformationIf you are responsible for

computer or physicalsecurity of PHI in you unitplease review the following

slides


28/48

Security Means that

Everyone must secure andsafeguard PHI so that others

cannot see or use itUNLESS it is necessary to do

the job


29/48


30/48

HIPAA Story

As part of my job, I work with PHI every day in theUniversitys business office. One day I was so tiredfrom working late that I left patient files open on mydesk so I could work on them early the next day.

Why clean up? Isnt it my

co-workers responsibility not to look at

what is on my desk?


31/48


32/48

Treat a Patients

Information

As i f it were your own

informat ion

It is the right thing to do!


33/48


34/48


35/48


36/48

Just checking. Please answer thefollowing questions.

1. What is PHI? (Please click on all answers you think areright. There may be more than one right answer.)

a. A persons Protected Health Information.

b. A persons health, billing or payment information that iscreated or received by a health care pro vider or healthplan.

c . Protec ted Heal th In format ion is in fo rmat ion abou t aperson th at can be used to ident i fy the person.

d . PHI is a persons information that is protected by theHIPAA law.


37/48


2. Who has to follow the HIPAA Law? (Please click on allanswers you think are right. There may be more than oneright answer.)

a. My supervisor, and other administrators, managers anddirectors

b. Everyone

c. I dont know

Click the next slide for the correct answer


38/48


2. Who has to follow the HIPAA Law? (Please click on allanswers you think are right. There may be more than oneright answer.)

a. My supervisor, and other administrators, managers anddirectors

b. Everyone

c. I dont know


39/48

Please continue with thesequestions

3. When can the University use or disclose PHI? (Click on allthe answers you think are correct. )

a. For treatment of a patient, if the patient has received the

Universitys Notice of privacy practices.b. For payment of bills, if the patient has received theUniversitys Notice of privacy practices.

c. For teaching activities, if the patient has received theUniversitys Notice of privacy practices.



40/48


3. When can the University use or disclose PHI? (Click on allthe answers you think are correct. )

a. For treatment of a patient, if the patient has received theUniversitys Notice of privacy practices.

b. For payment of bi l ls , i f the patient has received theUniversitys Notice of privacy practices.

c . For teach ing ac t iv i ti es , i f the pat ien t has received theUniversitys Notice of privacy practices.


41/48


42/48


4. When must you protect a patients personal or healthinformation? (Click on one or more answer.)

a. NOW because there are federal and California laws thatprotect a persons information.

b. NEVERc. I dont know


43/48


5. When can you use or disclose PHI? (Click on one or moreanswer).

a. Only if HIPAA allows me to use or disclose PHI as a part ofmy job.

b. For the treatment of a patient, if that is part of my job.c. For obtaining payment for services, if that is part of my job.d. For teaching activities, if that is part of my job.



44/48


5. When can you use or disclose PHI? (Click on one or moreanswer).

a. Only i f HIPAA al lows me to use or disclo se PHI as a part ofmy job.

b. For the treatment of a patient, i f that is part of my job.c. For obtaining payment for services, i f that is part of my job.

d. For teachin g act iv i t ies, i f that is part of my job.


45/48


6. Where can you go to get more information about whatHIPAA says that you and the University can do withPHI? (Click on one or more answer.)

a. In the Universitys Notice of Privacy Practices.

b. From the Universitys HIPAA Web-site.c. From my supervisor or manager.d. From the Universitys Privacy Officer.



46/48


6. Where can you go to get more information about whatHIPAA says that you and the University can do withPHI? (Click on one or more answer.)

a. In the Universitys Notice of Privacy Practices.

b . From the Universitys HIPAA Web-site.c . From my sup erv iso r o r manag er.

d . From the Universitys Privacy Officer.


47/48

Special ized Training

Modules

Some members of the workforce may continuewith additional HIPAA training that is specific

to the job that they perform for theUniversity.


48/48

48

Training Certificate

Congratulations! You have now completed the HIPAA PHI Workforce Trainingmodule.

Please print this slide, sign and date it and provide it to yoursupervisor or unit head to document that you have completed thismandatory training.

Disclaimer: This module is intended to provide educationalinformation and is not legal advice. If you have questions regardingthe privacy / security laws and implementation procedures at yourfacility, please contact your supervisor or the healthcare privacyofficer at your facility for more information.

Print Name: ______________Dept.:______

Documents

HIPAA Workforce Training1.pdf