(HIPAA)

1. (HIPAA) Health Insurance Portability and Accountability Act of 1996

2. HIPAA refers to the Health Insurance Portability and Accountability Act of 1996 • One of the primary objectives of HIPAA is to protect personal medical information What is HIPAA?

3. HIPAA Overview All HIPAA-covered entities, including health plans and healthcare providers, are regulated and covered by HIPAA laws February 18, 2010, was the date for required compliance by business associates of these entities with HIPAA requirements Business associates are subject to direct liability by regulation as of September 23, 2013 The definition of a “breach” of protected health information as of September 23, 2013 was broadened to have more limited exclusions

4. HIPAA information is sensitive and should be kept confidential because it can be misused and exploited by others for identity theft or fraud. • An entity needs to meet allapplicable HIPAA requirements Why HIPAA?

5. HIPAA Compliance HIPAA laws have two main purposes: To protect personal privacy To prevent crime HIPAA privacy and security rules are enforced by the Office for Civil Rights (OCR) part of Department of Health and Human Service (HHS)

6. When someone’s Protected Health Information (PHI) is disclosed, it becomes a serious offense • The most severe fine imposed for HIPAA violations includes $50,000 per violation • Maximum of $1.5 million-per-year for violations of an identical provision, as well as imprisonment Disclosing PHI – A Serious Offense

7. HIPAA’s security rule mainly deals with electronic Protected Health Information (ePHI) in any electronic or digital form • Disclosure of someone’s PHI requires a HIPAA authorization (a “release”) • A limited amount of information of PHI disclosure to family and friends may be permitted in certain circumstances • Disclosure of someone’s own PHI to that individual and disclosure for treatment does not require minimum necessary filtering HIPAA Security Rule

8. HIPAA minimum necessary rules do not apply to uses and disclosure for treatment • Many individuals expect that their health information will be used and disclosed as necessary to treat them, bill for treatment, and, to some extent, operate the covered entity’s healthcare business Disclosure for Treatment

9. To avoid interfering with an individual’s access to quality health care or the efficient payment for such health care, the Privacy Rule permits a covered entity to use and disclose protected health information, with certain limits and protections, for treatment, payment, and healthcare operations activities • Most disclosures for treatment, payment and healthcare operations do not require an authorization Disclosure for Treatment

10. HIPAA and E-mail E-mailing of certain information and Protected Health Information is generally not permitted. If it is permitted by the carrier, all e-mails that contain confidential information or Protected Health Information must be encrypted.

11. HIPAA and Electronic Communications Electronic communications of protected health information, to the extent permitted by the Company, require application of reasonable safeguards and adequate protections against inappropriate use or disclosure

12. Anonymous reporting may be made through the Toll-Free Hotline provided by the Company’s Third Party Hotline Service: Taylor White Accounting and Finance (888) 368-7988, or Reporting may also be made to the Company’s Privacy Officer. Reporting a Potential Privacy Breach

13. Thank You

14. For agent use only.  Not for use with consumers.  Certain exclusions and limitations may apply.  Not affiliated with the United States government or the federal Medicare program.  The content of this presentation reflects the opinion of the presenter and not necessarily the opinion of any entity with which the presenter has a business relationship.  This information is provided for educational purposes.  The ongoing implementation of laws, rules, and regulations may call for information in this presentation to be revised.  Neither the presenter, nor any entity with which the presenter may be affiliated, contracted, or employed, provide tax, investment, or legal advice.