click below
click below
Normal Size Small Size show me how
HIPPA
CMAA
Term | Definition |
---|---|
Protected Health Information (PHI) | Any identifiable health information in any form—written, electronic, or verbal—is protected by the Privacy Rule. |
Electronic Protected Health Information (ePHI) | is any identifiable patient data that is either stored or transmitted in electronic form. |
Covered Entities | HIPAA identifies a variety of providers as |
Health Plans | Any company or group that pays for medical care. |
Healthcare Providers | Any provider (hospital, doctor, dentist, pharmacy) that electronically transmits health information for transactions. |
Healthcare Clearinghouse | Organizations that process certain health information (such as converting diagnostic and treatment information into electronic bills). |
Business Associate | A business that provides services to a covered entity and may come into contact with PHI is known as a |
Health Information Technology for Economic and Clinical Health (HITECH) Act | of 2009 included the requirement that business associates comply with HIPAA to the same extent as covered entities. |
Security Rule | protects electronic health information that is stored or transmitted. Broken down into standards and implementation specifications, the Security Rule governs the confidentiality, integrity, and availability (CIA) of electronic health information. |
Privacy Rule | which governs the use and disclosure of protected health information (PHI). |
Minimum Necessary | access guides all sharing of PHI. Only the minimum amount of information needed to meet a legitimate purpose should be shared. |
Notice of Privacy Practices (NPP) | describing how the organization will use patient records. |