Presentation Transcript

1. February 2012

   Notice of Privacy Practices for Protected Health Information

2. What is HIPAA? HIPAA is the Health Insurance Portability and Accountability Act of 1996 The HIPAA Privacy Rule provides federal protections for personal health information and gives patients an array of rights with respect to that information. The Privacy Rule is balanced so that it permits the disclosure of personal health information needed for patient care and other important purposes.  US Dept of Health and Human Services HHS.gov
3. Understanding HIPAA… The Security Rule safeguards confidentiality, integrity, and availability of electronic protected health information.  Health plans and covered health care providers are required to develop and distribute a notice that provides a clear explanation of these rights and practices. The notice is intended to focus individuals on privacy issues and concerns, and to prompt them to have discussions with their health plans and health care providers. US Dept of Health and Human Services HHS.gov
4. Understanding HIPAA… Health Information Is Protected By Federal Law. The Privacy Rule, is a Federal law and gives Patients the rights over their health information It sets rules and limits on who can look at and receive their health information. It applies to all forms of individuals' protected health information, whether electronic, written, or oral. US Dept of Health and Human Services HHS.gov
5. Understanding HIPAA… The Security Rule, is a Federal law that protects health information in electronic form, requires entities covered by HIPAA to ensure that electronic protected health information is secure. US Dept of Health and Human Services HHS.gov
6. Who must follow these Laws? Covered entities that must follow the HIPAA regulations include: Health Plans, including health insurance companies, HMOs, company health plans, and certain government programs that pay for health care, such as Medicare and Medicaid. Health Care Providers—including doctors, clinics, hospitals, psychologists, chiropractors, nursing homes, pharmacies, and dentists.  Health Care Clearinghouses—entities that process nonstandard health information they receive from another entity into a standard (i.e., standard electronic format or data content), or vice versa. US Dept of Health and Human Services HHS.gov
7. How is this information protected? We have limit uses and disclosures to the minimum necessary information to accomplish our intended purpose. Contracts are in place with our contractors and others ensuring that they use and disclose the patients health information properly and safeguard it appropriately. Procedures are in place to limit who can view and access patient health information as well as implement training programs for employees about how to protect this health information. US Dept of Health and Human Services HHS.gov
8. What Information Is Protected? Any information supplied in the patients medical record by doctors, nurses, and other health care providers Conversations patients have with their doctor, nurses or others Information provided by health insurance companies Billing information Most other health information about the patient is held by those who must follow these laws US Dept of Health and Human Services HHS.gov
9. Privacy Rights… If patients feel their rights are being denied or their health information isn’t being protected, they can: File a complaint with the provider or health insurer File a complaint with the U.S. Government US Dept of Health and Human Services HHS.gov
10. Who can Look at and Receive Health Information? The Privacy Rule sets rules and limits on who can look at and receive the patients health information Information can be shared with patient permission in order to: Coordinate care and treatment of the patient To pay doctors and hospitals US Dept of Health and Human Services HHS.gov
11. Who can look… Every time a patient visits a different specialty clinic within PVMG they should be filling out the Medical Record of Consent. Patient health information cannot be used or shared without their written permission. For example, without their authorization, we generally cannot: Give this information to their employer Use or share their information for marketing or advertising purposes Share private notes about their health care US Dept of Health and Human Services HHS.gov
12. Poudre Valley Medical Group You can find the “Authorization and Consent to Treatment” in Quick Documents in Allscripts. For any patient under the Age of 18 the Authorization and Consent to Treatment-Minor must be completed by the parent or legal guardian. This Consent for Treatment should be updated on a yearly basis. The notice of privacy practice brochure is ordered by your practice administrator .
13. PVMG continue… We must make its notice available to any person who asks for it. We must prominently post and make available on our website
14. Compliance Contacts Brenda Harstad Ethics, Compliance, and Privacy Officer blh@pvhs.org 970-237-7022 Le Meyer Clinic/Compliance and Risk Analyst lam12@pvhs.org 970-237-702