Contents
1. Protecting the Privacy of Patient’s Health Information
v
Overviewv
Patient Protectionsv
Health Plans and Providersv
Outreach and Enforcement2. Summary of the HIPAA Privacy Rule
v
Introductionv
Statutory & Regulatory Backgroundv
Who Is Covered by The Privacy Rulev
Definitionsv
Business Associatesv
What Information Is Protectedv
General Principle for Uses and Disclosuresv
Permitted Uses and Disclosuresv
Authorized Uses and Disclosuresv
Limiting Uses and Disclosures to the Minimum Necessaryv
Notice and Other Individual Rightsv
Administrative Requirementsv
Organizational Optionsv
Other Provisions: Personal Representatives and Minors’ Personal Representativesv
State Lawv
Enforcement and Penalties for Noncompliancev
Compliance Datesv
Copies of the Rule & Related Materialsv
Incidental Uses and Disclosuresv
Minimum Necessaryv
Personal Representativesv
Business Associatesv
Uses and Disclosures for Treatment, Payment, and Health Care Operationsv
Marketingv
Disclosures For Public Health Activitiesv
Researchv
Disclosures For Workers’ Compensation Purposesv
Notice of Privacy Practice For Protected Health Informationv
Restrictions on Government Access to Health Information3. Implementation of Administrative Simplification Requirements by HHS
Overview
Implementation Plan
Standards Adoption Process
Public and Private Sector Input into the Standards Development Process
Implementation Schedule
Understanding CMS’s Compliance Policy
What Is a Contingency Plan?
Steps For Contingency Planning
Health Plan Responsibilities
Review Your Good Faith Efforts to Comply
4. Security Standard
v
General Approachv
Specific Requirementsv
Guidance on Compliance with HIPAA Transactions and Code Sets After the October 16, 2003 ImplementationDeadlineEnforcement Approach
Working Toward Compliance
v
HIPAA Administrative Simplification Compliance Act (ASCA)v
Electronic Transaction Standardsv
Code Set StandardsWhat Is a Code Set
What Code Sets Have Been Adopted as HIPAA Standards?
5. FAQ About HIPAA
v
HIPAA: In Generalv
Privacy Rule: General Topicsv
Protected Health Informationv
Preemption of State Lawv
Covered Entitiesv
Compliance Datesv
Minimum Necessaryv
Business Associatesv
Treatment/Payment/Health Care Operationsv
Right to Access Medical Recordsv
Complaintsv
Right to an Accounting of Disclosuresv
Incidental Uses and Disclosuresv
Public Health Uses and Disclosuresv
Facility Directoriesv
Disclosure to Family and Friendsv
Disclosures Required by Lawv
Disclosures for Rule Enforcementv
Disclosures for Law Enforcement Purposesv
Authorizationsv
Marketing Uses and Disclosuresv
Workers’ Compensation Disclosuresv
Notice of Privacy Practicesv
Personal Reps/Parents and Minorsv
Limited Data Setv
Research Uses and Disclosuresv
Transition ProvisionAppendix A: Notice of Privacy Practices
Appendix B: Sample Business Associate Contract
Appendix C: How to File a Health Information Privacy Complaint With the Office For Civil Rights