HIPAAHIPAAByBy

George MingleGeorge MingleMHA690MHA690

Welcome AboardWelcome AboardFederal law Federal law passed by passed by Congress in 1996 Congress in 1996 Regulations Regulations promulgated by promulgated by the Dept of the Dept of Health and Health and Human Services Human Services Guidelines Guidelines implemented in implemented in April, 2003April, 2003

HIPAA!!!!!!!HIPAA!!!!!!!HIPAA regulations were HIPAA regulations were

designed to:designed to:1) protect individuals’ 1) protect individuals’

rights to privacy and rights to privacy and confidentialityconfidentiality

andand2) assure the security of 2) assure the security of

electronic transfer of electronic transfer of personal informationpersonal information

Who has Access to PHI?Who has Access to PHI?The ‘Need-to-Know’ PrincipleThe ‘Need-to-Know’ Principle

PHI should be shared PHI should be shared with as with as few individuals few individuals as neededas needed to ensure to ensure patient care and then patient care and then only to the extent only to the extent demanded by the demanded by the individual’s role.individual’s role.

For example, the nursing For example, the nursing assistant ‘needs to assistant ‘needs to know’ only the facts know’ only the facts concerning the concerning the patient’s current patient’s current admission.admission.

Protecting your patient’s PHIProtecting your patient’s PHITake all reasonable steps Take all reasonable steps to make sure that to make sure that individuals without the individuals without the ‘need to know’ do not ‘need to know’ do not overhear conversations overhear conversations about PHI.about PHI.DO NOT conduct DO NOT conduct discussion about PHI in discussion about PHI in elevators or cafeterias.elevators or cafeterias.Do not let others see your Do not let others see your computer screen while you computer screen while you are working. Be sure to log are working. Be sure to log out when done with any out when done with any computer file.computer file.

Destroying PHI/PMIDestroying PHI/PMIDO NOT put notes DO NOT put notes

with PHI/PMI in the with PHI/PMI in the trash or paper trash or paper recycle cans.recycle cans.

A paper shredder is A paper shredder is available in all available in all work Centers. Use work Centers. Use it for these it for these materialsmaterials

Consequences of HIPAA ViolationsConsequences of HIPAA Violations

Legal consequencesLegal consequencesCivil or criminal penaltiesCivil or criminal penaltiesFines plus imprisonmentFines plus imprisonment

Professional consequences:Professional consequences:Disciplinary action by the Board of Nurse Disciplinary action by the Board of Nurse ExaminersExaminers

Don’t be the one!Don’t be the one!Respect patients’ Respect patients’ privacy for you can privacy for you can be a patient be a patient someday.someday.