Summarizing the HIPAA Privacy Rule

CE Course Description

The Health Insurance Portability and Accountability Act Privacy Rule provides consumers with important privacy rights and protections concerning their health information. It is critical that providers understand when it is appropriate to share the protected health information of a patient who is being treated for a behavioral health condition. All healthcare providers are responsible for understanding and implementing HIPAA requirements. This course will increase healthcare providers’ knowledge of HIPAA privacy rules, how to best protect patient information, what information can be legally shared with others, and under what circumstances. 

Author: Kimberley Fortin, LCSW-R

CE Course Objectives

1. Identify what information is covered under the HIPAA privacy rule and what entities are expected to comply with the rule. 
2. Examine the requirements and permitted uses of disclosures of protected health information.
3. Summarize administrative and organizational requirements regarding HIPAA compliance.
   
4. Recognize what guidelines should be followed to communicate with others (e.g. family members, law enforcement, higher level of care personnel) in situations where patients present with an imminent threat to themselves or others.

CE Course Outline

Introduction (5 mins)

1. Course overview and objectives (5 mins)

What is HIPAA? (5 mins)

1. Overview of HIPAA (5 mins)

What is The Privacy Rule (5 mins)

1. Overview of The Privacy Rule (5 mins)

Covered Entities (10 mins)

1. Health Plans (2 mins)
2. Health Care Clearinghouses (2 mins)
3. Health Care Providers (2 mins)
4. Business Associates (4 mins)

Protected Health Information (10 mins)

1. Definition and examples of PHI (10 mins)

Uses & Disclosures of Protected Health Information (20 mins)

1. Required Disclosures (2 mins)
2. Permitted Uses & Disclosures (4 mins)
3. Authorized Uses & Disclosures (4 mins)
4. Limiting Uses & Disclosures (3 mins)
5. Access & Uses (2 mins)
6. Disclosures and Requests for Disclosures (3 mins)
7. Reasonable Reliance(2 min)

Notice & Individual Rights (15 mins)

1. Privacy Practice Notice (3 min)
2. Access (2 mins)
3. Amendment (4 mins)
4. Disclosure Accounting (2 mins)
5. Restriction Requests (2 mins)
6. Confidential Communications (2 mins)

Administrative Requirements (15 mins)

1. Privacy Policies and Procedures (2 mins)
2. Privacy Personnel (2 mins)
3. Workforce Training and Management (2 mins)
4. Mitigation (1 min)
5. Data Safeguards (1 min)
6. Complaints (1 min)
7. Retaliation and Waiver (2 mins)
8. Documentation and Record Retention (2 mins)
9. Fully-Insured Group Health Plan Exception (2 mins)

Organizational Options (5 mins)

1. Hybrid Entity (1 min)
2. Affiliated Covered Entity (1 min)
3. Organized Health Care Arrangement (1 min)
4. Covered Entities with Multiple Covered Functions (1 min)
5. Group Health Plan Disclosures to Plan Sponsors (1 min)

Personal Representatives and Minors (5 mins)

1. Personal Representatives (3 mins)
2. Minors (2 mins)

State Laws (5 mins)

1. Exception Determination (5 mins)

Enforcement and Penalties for Noncompliance (15 mins)

1. Compliance (5 min)
2. Civil Money Penalties (5 min)
3. Criminal Penalties (5 min)

Conclusion (5 mins)

1. Conclusion (5 mins)