HIPAA privacy and security rule requirements, release of information rules, and legal health record concepts.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What does HIPAA stand for?
- The Health Insurance Portability and Accountability Act
- In what year was HIPAA enacted?
- 1996
- What are the two main rules established under HIPAA to protect patient information?
- The Privacy Rule and the Security Rule
- What does the HIPAA Privacy Rule primarily protect?
- The privacy of individually identifiable health information, called protected health information (PHI)
- What does the HIPAA Security Rule primarily protect?
- The confidentiality, integrity, and availability of electronic protected health information (ePHI)
- What does the abbreviation PHI stand for?
- Protected health information
- How many identifiers does HIPAA specify that can make health information individually identifiable?
- 18 identifiers
- What are the three types of safeguards required under the HIPAA Security Rule?
- Administrative, physical, and technical safeguards
- What is an example of an administrative safeguard under the HIPAA Security Rule?
- Workforce training and a designated security officer
- What is an example of a physical safeguard under the HIPAA Security Rule?
- Facility access controls and workstation security
- What is an example of a technical safeguard under the HIPAA Security Rule?
- Access controls, audit controls, and encryption of electronic data
- What is the "minimum necessary" standard under HIPAA?
- Covered entities must limit use and disclosure of PHI to the minimum needed to accomplish the intended purpose
- What is a "covered entity" under HIPAA?
- A health plan, healthcare clearinghouse, or healthcare provider that transmits health information electronically
- What is a "business associate" under HIPAA?
- A person or entity that performs functions on behalf of a covered entity involving the use or disclosure of PHI
- What document must a covered entity have in place with a business associate to permit sharing of PHI?
- A business associate agreement (BAA)
FlashKeepers