HIPAA PRIVACY RULE COMPLIANCE COURSE

Overview of HIPAA

• Definitions and Background
• 51 CFR Parts 160-164 and Role of DHHS
• Covered Entities
• Components of HIPAA
• Requirements and Non-Compliance Penalties

Privacy Rule-1: Basic Concepts

• Overview
• Concepts of PHI, TPO and MNI
• Privacy Officer and Management
• Authorization and Disclosures
• Implementation of Privacy Rule

Privacy Rule-2: Privacy Notice

• Policies for TPO disclosures of PHI
• Policies for Non-TPO issues
• Patients Rights
• Policies for complaints
• Role of Privacy Officer in Implementation

Privacy Rule-3: Policies and Procedures

• General Administration
• Staff Responsibilities
• Education and Training of Staff
• Documentation and Record Keeping
• Policies for Disclosures of PHI
• Relationship with Business Associates
• Electronic Transactions

Privacy Rule-4: Business Associates

• Definition and Kinds
• Use or Disclosure of PHI
• Availability or Access of PHI
• Safety and Destruction of PHI
• New or Revision of Contracts

Privacy Rule-5: Privacy Plan

• Privacy Overview
• Privacy Officer and mechanics of privacy management
• PHI: Access, authorization, disclosure and safety Plan
• List of contracted Business Associates
• EDI Plan for testing and implementing HIPAA standards

HIPAA Education and Training Program

• Definitions and Responsibilities of Staff
• Old and New Staff Training
• Training for Privacy and Security Issues
• HIPAA Standards Training
• Electronic hardware and software training for EDI

Electronic Health Care Transactions & Code Sets Standards

• Goal and Objectives
• ICD-9, CPT-4 and HCPCS Codes
• New HIPAA Standards Implementation
• Electronic Data Interchanges (EDI)
• EDI Testing and Implementation

Security Rule

• Overview and Current Status for Compliance
• Comparison with Privacy
• Electronic and Non-Electronic Data Security
• Methods of Implementation

National Identifiers

• Types of Identifiers
• Goals and Objectives
• Current Status and Future compliance