Health Insurance Portability and Accountability Act of 1996 HIPAA

1
Health Insurance Portability and Accountability
Act of 1996HIPAA

• Colorado Technical University
• CS662 System Security Certifications and
  Accreditations
• Professor Scott Puryear
• Cathi M. Allen
• June 23, 2005

2
Overview

• Introduction
• Purpose
• Privacy Rule
• Security Rule
• Certifications
• Conclusion
• References

3
Pop Quiz

• What is HIPAA
• A new species of animal created by mating a Hippo
  with an Antelope
• A new genre of music similar to Hip Hop with more
  intelligent lyrics
• Talibans attempt to confuse US citizens as a
  distraction taking our attention off their
  actions
• Governmental standards implemented to protect
  personal and confidential information

4
Introduction

• Public Law 104-191, 104th Congress
• August 21, 1996
• An Act
• To amend the Internal Revenue Code of 1986 to
  improve portability and continuity of health
  insurance coverage in the group and individual
  markets, to combat waste, fraud, and abuse in
  health insurance and health care delivery, to
  promote the use of medical savings accounts, to
  improve access to long-term care services and
  coverage, to simplify the administration of
  health insurance, and for other purposes.

5
Purpose

• Protection of all health information
• Extensive and elaborate set of rules
• Apples to health plans, hospitals, doctors, other
  health care providers
• Effective as of April 14, 2003
• Challenge
• Assurance that all patient account handling,
  billing, and medical records are HIPAA compliant

6
Privacy Rule

• Purpose
• Implements the Privacy Requirements of the
  Administrative Simplification subtitle of HIPAA
• Goal
• Protection
• Provision
• Address negative effects
• Relieve administrative burdens

7
Security Rule

• The rule titled Security Standards for the
  Protection of Electronic Protected Health
  Information (45 CFR Part 160 and Part 164,
  Subparts A and C) is commonly known as the
  Security Rule. This rule was adopted to
  implement provisions of HIPAA. The Security Rule
  addresses Administrative, Physical, and Technical
  Safeguards, and Organizational, Policies
  Procedures and Documentation Requirements
  necessary to achieve HIPAA compliance.

8
Security Rule

• Covered Entities
• Covered Health Care Providers
• Health Plan
• Health Care Clearinghouses
• Medicare Prescription Drug Card Sponsors
• Administrative Safeguards

9
Security Rule

• Physical Safeguards
• Electronic information systems
• Building
• Equipment
• Technical Safeguards
• EPHI protection
• Controlled Access

10
Security Rule

• Organizational Policies, Procedures and
  Documentation Requirements
• Business associate contracts
• Other arrangements and contracts
• Plan documents of group health plans

11
Certifications

• HIPAA Certifications
• Certified HIPAA Professional (CHP)
• Certified HIPAA Security Specialist (CHSS)
• Recommended
• CISSP
• Security
• SCNA

12
Conclusion

• HIPAA
• Protection of personal information
• Information in any media addressed
• Requires compliance
• Addresses necessary Insurance Reform
• Certification is essential to successful
  compliance
• Wear Sunscreen

13
References

• Centers for Medical and Medicare Services
• http//www.cms.hhs.gov/hipaa/hipaa1/default.asp
• http//www.cms.hhs.gov/hipaa/hipaa2/regulations/pr
  ivacy/finalrule/privruletxt.txt
• HIPAA.ORG
• http//www.hipaa.org/
• HIPAA Academy
• http//www.hipaaacademy.net
• National Institute of Health
• http//privacyruleandresearch.nih.gov/
• Department of Labor
• http//www.dol.gov/ebsa/faqs/faq_consumer_hipaa.ht
  ml
• HIPAAcomply
• http//www.hipaacomply.com/