1. Confidentiality And
HIPAA Regulation
Rachelle K. Ball
MHA690: Health Care Capstone
Instructor: Sherry Grover
April 4, 2013

2. Overview
 Confidentiality
 HIPAA Law
 Training
 Privacy Protection
 Company Regulations

3. Confidentiality
“The right for patients to have personal,
identifiable information kept
private”…….(HHS.gov, 2013).
Personal Identifiable
Information
Age Gender
Name
Diagnosis
Race
Address
School Attending
Place of Employment

4. HIPAA Law
4 Main Areas of HIPAA Law
 Privacy Rules - Protects patient information from being shared
without the patient’s consent.
 Security Rules - Puts in place administrative, physical and
technical safeguards in place.
 Transactions Rules - Approved code sets for billing (ICD
9, CPT, HCPCS, ICD-10, etc…)
 Identifiers Rules - Unique identifiers for covered entities
(EIN, NPI & NHI)
 Enforcement Rules - Regulations for the HITECH
transmission of personal health information. (HIPAA, 2013)

5. Training
Requirements
 Annual HIPAA / Compliance Computer Based Training
(CBT) Training
 Monthly Staff Meetings
 Intranet with Updates on all HIPAA and Compliance
Updates

6. Privacy
Protection
Individualized Password
Per Employee (Time Out After 5 Minutes)
Hierarchy of Access
Limit to Facility or Job Description
Continual Monitoring of Information Accessed

7. Consequences for
Violation
Disciplinary Action
Fined and/or Suspension
Termination

8. References
HHS.gov (2013). Patient Confidentiality. Retrieved from
http://www.hhs.gov/ocr/privacy
HIPAA.org (2013). HIPAA Compliance, Regulations, Standards,
Certification, Training. Retrieved from
http://www.hipaaguidelines101.com