HIPAA (1996) Compliance
HIPAA (1996) compliance
HCS/545
10/29/12
By
Sunao Slayton, Bonnie Zapletal
Julienne Auguste, Toccara Grant
Introduction
Responded to the situations in a way that meets HIPAA (1996) privacy, security, and HITECH
(2009ond to the) breach notice requirements. Ethical issues that relate to this situation. Follow-up with employees involved in the breach. Recommend changes to ensure data security and privacy compliance under HIPAA (1996)
Respond to the situations that meets HIPAA (1996) privacy, security, and HITECH (2009) breach notice requirements.
Physical safeguards
Technical safeguards
Technical policies
Network, or transmission, security
Explain the ethical issues that relate to this situation
Informed
Consent
Disclosure
Confidentiality
Explain how you will follow-up with employees involved in the breach
Mitigate Activities
Additional HIPAA Training
Corrective Counseling
Disciplinary Action
Recommend changes to ensure data security and privacy compliance under
HIPAA (1996)
Robust Password
Selection
Isolate Important
Client Data
Limit Access to
Important Data
Encrypt and Decrypt
Information
Recommend Changes to ensure data security and privacy Compliance Under
HIPAA (1999) cont…
Data Back-up and Storage
Positioning of workstation
Employee Accountability
Medical Errors (Incident
Reports)
Ways to respond to the medical error to reduce liability
Understanding why patients sue
Emotional reasons for pursuing litigation
What patients and family seek when error occurs The importance of “satisfying” patients
› Satisfied patients are less likely to sue
Explain the ethical issues that arise in this situation
Put patient safety first and work to reduce preventable injuries.
Foster better communication between doctors and their patients.
Ensure that patients are compensated in a fair and timely manner for medical injuries while also reducing the incidence of frivolous lawsuits. Reduce liability premiums
Responding to Joint
Commission concerns
Reporting Critical
Results within 60 minutes Verbal Order / Read
Back elements
Unacceptable
Abbreviations
Time Out
Quality improvement strategy to reduce Medical Errors
“To Error is Human”
› Accept that medication error can occur at:
Prescribing, Dispensing, Administering,
Monitoring
System wide improvement
› Bar coding, patient monitoring, order read back, medication alert system
› Medication reconcilliation
Provision of better error reporting system
Conclusion
A covered entity may deny an individual access, provided that the individual is given a right to have such denials reviewed by
A licensed health care professional (who is designated by the covered entity and who did not participate in the original decision to deny), when a licensed health care professional has determined, in the exercise of professional judgment, that:
(a)
the access requested is reasonably likely to endanger the life or physical safety of the individual or another person; (b) the protected health information makes reference to another person (unless such other person is a health care provider) and the access requested is reasonably likely to cause
References
McEwen, D., & Dumpel, H. (2011). HIPAA -- the health insurance portability and accountability act: what RNs need to know about privacy rules and protected health information. National Nurse, 107(7), 18-26.
What is hipaa compliance. (2012). Retrieved from http://www.onlinetech.com/compliant-hosting/hipaa-complianthosting/resources/what-is-hipaa-compliance
Harris, D.M. (2008). Contemporary issues in healthcare law and ethics (3rd ed.). Retrieved from University of Phoenix eBook, D.M. (2008).
Stetina, P., Groves, M., & Pafford, L. (2005). Manageing Medication Errors –
A Qualitative Study. MEDSURG Nursing, 149(3), 174-178.
Tipton, D.J., Turco, M., Tamada, S. (2003). Make a Mistake? Is a Lawsuit in the Future? Clinical Research and Regulatory Affairs, 20(4), 487-495.
Hall, M.F. (2008). Looking to improve financial results? Start by listening to patients. Healthcare Financial Management, 62(10), 76-80
To Err is Human. (1999) Retrieved from http
://www.iom.edu/~/media/Files/Report%20Files/1999/To-Err-is-Human/T
o%20Err%20is%20Human%201999%20%20report%
20brief.pdf
• Murphy, E.M., Oxencis, C.J., Klauck, J.A., Meyer, D.A., and Zimmerman, J.M.
(2009). Medication reconciliation at an academic medical center:
Implementation of a comprehensive program from admission to discharge.
American Journal of Health-Systems Pharmacist, 66, 2126-2131.
http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary/index.html
HCS/545
10/29/12
By
Sunao Slayton, Bonnie Zapletal
Julienne Auguste, Toccara Grant
Introduction
Responded to the situations in a way that meets HIPAA (1996) privacy, security, and HITECH
(2009ond to the) breach notice requirements. Ethical issues that relate to this situation. Follow-up with employees involved in the breach. Recommend changes to ensure data security and privacy compliance under HIPAA (1996)
Respond to the situations that meets HIPAA (1996) privacy, security, and HITECH (2009) breach notice requirements.
Physical safeguards
Technical safeguards
Technical policies
Network, or transmission, security
Explain the ethical issues that relate to this situation
Informed
Consent
Disclosure
Confidentiality
Explain how you will follow-up with employees involved in the breach
Mitigate Activities
Additional HIPAA Training
Corrective Counseling
Disciplinary Action
Recommend changes to ensure data security and privacy compliance under
HIPAA (1996)
Robust Password
Selection
Isolate Important
Client Data
Limit Access to
Important Data
Encrypt and Decrypt
Information
Recommend Changes to ensure data security and privacy Compliance Under
HIPAA (1999) cont…
Data Back-up and Storage
Positioning of workstation
Employee Accountability
Medical Errors (Incident
Reports)
Ways to respond to the medical error to reduce liability
Understanding why patients sue
Emotional reasons for pursuing litigation
What patients and family seek when error occurs The importance of “satisfying” patients
› Satisfied patients are less likely to sue
Explain the ethical issues that arise in this situation
Put patient safety first and work to reduce preventable injuries.
Foster better communication between doctors and their patients.
Ensure that patients are compensated in a fair and timely manner for medical injuries while also reducing the incidence of frivolous lawsuits. Reduce liability premiums
Responding to Joint
Commission concerns
Reporting Critical
Results within 60 minutes Verbal Order / Read
Back elements
Unacceptable
Abbreviations
Time Out
Quality improvement strategy to reduce Medical Errors
“To Error is Human”
› Accept that medication error can occur at:
Prescribing, Dispensing, Administering,
Monitoring
System wide improvement
› Bar coding, patient monitoring, order read back, medication alert system
› Medication reconcilliation
Provision of better error reporting system
Conclusion
A covered entity may deny an individual access, provided that the individual is given a right to have such denials reviewed by
A licensed health care professional (who is designated by the covered entity and who did not participate in the original decision to deny), when a licensed health care professional has determined, in the exercise of professional judgment, that:
(a)
the access requested is reasonably likely to endanger the life or physical safety of the individual or another person; (b) the protected health information makes reference to another person (unless such other person is a health care provider) and the access requested is reasonably likely to cause
References
McEwen, D., & Dumpel, H. (2011). HIPAA -- the health insurance portability and accountability act: what RNs need to know about privacy rules and protected health information. National Nurse, 107(7), 18-26.
What is hipaa compliance. (2012). Retrieved from http://www.onlinetech.com/compliant-hosting/hipaa-complianthosting/resources/what-is-hipaa-compliance
Harris, D.M. (2008). Contemporary issues in healthcare law and ethics (3rd ed.). Retrieved from University of Phoenix eBook, D.M. (2008).
Stetina, P., Groves, M., & Pafford, L. (2005). Manageing Medication Errors –
A Qualitative Study. MEDSURG Nursing, 149(3), 174-178.
Tipton, D.J., Turco, M., Tamada, S. (2003). Make a Mistake? Is a Lawsuit in the Future? Clinical Research and Regulatory Affairs, 20(4), 487-495.
Hall, M.F. (2008). Looking to improve financial results? Start by listening to patients. Healthcare Financial Management, 62(10), 76-80
To Err is Human. (1999) Retrieved from http
://www.iom.edu/~/media/Files/Report%20Files/1999/To-Err-is-Human/T
o%20Err%20is%20Human%201999%20%20report%
20brief.pdf
• Murphy, E.M., Oxencis, C.J., Klauck, J.A., Meyer, D.A., and Zimmerman, J.M.
(2009). Medication reconciliation at an academic medical center:
Implementation of a comprehensive program from admission to discharge.
American Journal of Health-Systems Pharmacist, 66, 2126-2131.
http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary/index.html