HIPAA Compliance

REFERENCE SECTION 

 APPENDIX A: DEFINITIONS OF HIPAA TERMS & ACRONYMS

APPENDIX B: LATE DEVELOPMENTS IN HIPAA

APPENDIX C THE FINAL PRIVACY RULE:  PART I:–Summary

Contents

Section I– Preamble to the Privacy Rule

Statutory Background

Section II: General Provisions

Pe-emption of State Laws

Compliance/Enforcement

General Rules for Uses and Disclosures of Protected Health Information

Uses and Disclosures–Organizational Requirements-Component Entities, Affiliated Entities, Business Associates and Group Health Plans

Uses and Disclosures for Treatment, Payment, and Health Care Operations

Uses and Disclosures for Which an Authorization is Required

Authorizations Requested by a Covered Entity for its Own Uses and Disclosures

Authorizations Requested by a Covered Entity for Disclosures by Others

Authorizations for Uses and Disclosures of PHI Created for Research that includes Treatment of Individuals

Uses and Disclosures Requiring an Opportunity for the Individual to Agree or Object

Use and Disclosure for Facility Directories

Uses and Disclosures for Involvement in the Individual’s Care and Notification Purposes

Uses and disclosures for which consent, an authorization, or opportunity to agree or object is not required

Uses and Disclosures for Public Health Activities

Disclosures about Victims of Abuse, Neglect or Domestic Violence

Uses and Disclosures for Health Oversight Activities

Disclosures and Uses for Judicial and Administrative Proceedings

Disclosure for Law Enforcement Purposes Disclosures Pursuant to Process and as Otherwise Required by Law

Uses and Disclosures About Decedents

Uses and Disclosures for Cadaver Donation of Organs, Eyes, or Tissues

Uses and Disclosures for Research Purposes

Uses and Disclosures to Avert a Serious Threat to Health or Safety

Uses and Disclosures for Specialized Government Functions Application to Military Services

Disclosures For Workers’ Compensation

OTHER PROCEDURAL REQUIREMENTS RELATING TO USES AND DISCLOSURES OF PHI

Minimum Necessary

Marketing

Fundraising

Underwriting

Verification of Identity and Authority of Persons Requesting Protected Health Information

NOTICE OF PRIVACY PRACTICES For Protected Health Information

Content of Notice

Provision of Notice

Joint Notice by Separate Covered Entities

Documentation; Rights To Request Privacy Protection For Protected Health Information

Confidential Communications Requirements

Access Of Individuals To Protected Health Information

Requests for Access and Timely Action/Provision of Access

Denial of Access

Policies, Procedures, And Documentation; Amendment Of Protected Health Information

Requests for Amendment and Timely Action; Accepting the Amendment

Part III. Discussion of Comments

Denying the Amendment

Actions on Notices of Amendment; Policies, Procedures, and Documentation

Accounting Of Disclosures Of Protected Health Information

ADMINISTRATIVE REQUIREMENTS

Transition Provisions

Compliance Dates For Initial Implementation Of The Privacy Standards

III. SECTION-BY-SECTION DISCUSSION OF COMMENTS

Part IV. Final Regulatory Impact Analysis

Part V. Final Regulatory Flexibility Analysis

Part VI. Un-funded Mandates

Part VII. Environmental Impact

Part VIII. Collection of Information Requirements

Part IX. Executive Order 13132: Federalism

Part X. Executive Order 13086: Consultation and Coordination with Indiant Tribal Governments

Security & Privacy

APPENDIX D Security and Electronic Signature Standards

Acknowledgements