UCLA Transplantation

1
UCLA Transplantation Services
HIPAA Overview
2
The Health Insurance Portability and
Accountability Act (HIPAA) was enacted by
Congress in 1996 to improve the efficiency and
effectiveness of the health care system.
3
Privacy Rule History

• August 1996 - Passage of HIPAA Gave Congress 36
  months to pass comprehensive privacy legislation
  for health information or DHHS was to promulgate
  final regulations Congress did not act by the
  deadlines, so
• November 3, 1999 - DHHS published proposed
  regulation for individual identifiable health
  information in the Federal Register more than
  52,000 comments received
• December 28, 2000 - Final Privacy Rule issued
  established an effective date of April 14, 2001
• January 2001 Final Privacy Rule put on hold
• February 2001 Privacy Rule reopened for
  comments
• March 27, 2002 - Notice of Public Rule Making
  (NPRM) published
• August 14, 2002 Revised Final Privacy Rule issued
• December 3, 2002 New guidance from Office of
  Civil Rights
• April 14, 2003 - Compliance date for Privacy Rule

4
The primary intent of HIPAA is to
provide better access to health insurance
reduce administrative costs
limit fraud abuse
5
HIPAA required the US Department of Health
Human Services (DHHS) to develop national
standards requirements for electronic health
care transactions health information that
identifies individual patients.
6
The HIPAA Privacy Rule supports public
responsibilities when disclosures of some forms
of data are necessary to protect public health
and safety.
7
The HIPAA Privacy Rule provides comprehensive
Federal protection for the privacy of protected
health information (PHI).
8
The Privacy Rule helps the individual make more
informed choices about how their PHI may be used.
9
The Privacy Rule does not replace Federal, State
or other law that grants individuals even greater
privacy protections.
10
HIPAA gives individuals more control over their
health information.
11
HIPAA allows individuals to find out how their
medical information may be used and disclosed to
others.
12
HIPAA limits the use and release of health
records.
13
HIPAA provides that individuals have the right to
obtain a copy of their own health records
request admendments to their health records.
14
HIPAA forces health care providers, agencies
organizations to develop policy procedures to
ensure the privacy of PHI.
15
HIPAA holds violators accountable to the extent
of civil criminal penalties.
16
The Privacy Rule limits the release of health
information to the minimum necessary or is
reasonably needed for disclosure.
17
Organizations, agencies health care providers
covered by the HIPAA Privacy Rule must comply
with the new requirements by April 14, 2003.
18
The UCLA Medical Center is considered a covered
entity under the HIPAA Privacy Rule.
19
Covered entities provide health care transmit
HIPAA transactions electronically.
20
Data Elements That Make Health Information
Identifiable Under HIPAA

• Name
• Address, including city, county and zip code
• Dates, including birth date, admission date,
  discharge date and date of death
• Telephone and fax numbers
• Electronic mail addresses
• Social security numbers
• Medical record numbers
• Health plan beneficiary number

• Account number
• Certificate/license number
• Vehicle or other device serial number
• Web URL
• Internet Protocol address
• Finger or voice prints
• Photographic images
• Any other unique identifying number,
  characteristic or code

21
Hipaa and Seatbelts A Culture Analogy
It should be noted that it took many years to
get the seatbelt usage up to its present level,
and it takes a heavy hand from the police to
persuade the stupid to do the obvious. Peter
N. Wadham
"Culture does not change because we desire to
change it. Culture changes when the organization
is transformed the culture reflects the
realities of people working together every
day." Frances Hesselbein Key to Cultural
Transformation
"Out at sea it takes 30 miles for an oil tanker
to reverse its direction. It takes time and
commitment to change, based on foundational
values, principles and quality relationships to
positively affect your company's culture -- its
way of doing things. " The Freeman Institute
Changing  the  Culture  of  Your Organization 
22
Let's review...
23
Do you have any questions?
24
Find out more about Hipaa and UCLA Transplant
Services
http//transplant.mednet.ucla.edu/hipaa.htm