HIPAA privacy and security rule requirements, release of information rules, and legal health record concepts.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What does HIPAA stand for?
Show answer
The Health Insurance Portability and Accountability Act- In what year was HIPAA enacted?
Show answer
1996- What are the two main rules established under HIPAA to protect patient information?
Show answer
The Privacy Rule and the Security Rule- What does the HIPAA Privacy Rule primarily protect?
Show answer
The privacy of individually identifiable health information, called protected health information (PHI)- What does the HIPAA Security Rule primarily protect?
Show answer
The confidentiality, integrity, and availability of electronic protected health information (ePHI)- What does the abbreviation PHI stand for?
Show answer
Protected health information- How many identifiers does HIPAA specify that can make health information individually identifiable?
Show answer
18 identifiers- What are the three types of safeguards required under the HIPAA Security Rule?
Show answer
Administrative, physical, and technical safeguards- What is an example of an administrative safeguard under the HIPAA Security Rule?
Show answer
Workforce training and a designated security officer- What is an example of a physical safeguard under the HIPAA Security Rule?
Show answer
Facility access controls and workstation security- What is an example of a technical safeguard under the HIPAA Security Rule?
Show answer
Access controls, audit controls, and encryption of electronic data- What is the "minimum necessary" standard under HIPAA?
Show answer
Covered entities must limit use and disclosure of PHI to the minimum needed to accomplish the intended purpose- What is a "covered entity" under HIPAA?
Show answer
A health plan, healthcare clearinghouse, or healthcare provider that transmits health information electronically- What is a "business associate" under HIPAA?
Show answer
A person or entity that performs functions on behalf of a covered entity involving the use or disclosure of PHI- What document must a covered entity have in place with a business associate to permit sharing of PHI?
Show answer
A business associate agreement (BAA)
FlashKeepers