click below
click below
Normal Size Small Size show me how
Ch. 3 HIPAA
Ch. 3 Privacy, Confidentiality, and Security
Term | Definition |
---|---|
anonymity | the patient's right to have private health data collected in a way that can never be linked or traced back to him or her. |
audit trail | a record that traces a user's electronic footsteps by recording activity and transactions, including unsuccessful attempts to view unauthorized screens, within the EHR system. |
authnitication | the process of determining whether the person attempting to access a given network or EHR system has authorization. user authentication can include p/w entry or use of biometric data or a smart card. |
authorization | document giving a covered entity permission to use protected health information for specified purposes other than treatment, payment, or healthcare operations or to disclose protected health information to a 3rd party specified by the patient. |
business associates | person or entity that performs certain functions or activities that involve the use or disclosure of protected health information on behalf of a covered entity. |
confidentiality | obligation of professionals to keep a patient's information in confidence. anyone entrusted with health information has a duty to keep that information private. confidentiality is protected by law to varying degrees. |
consent | permission given to covered entity for uses and disclosures of protected health information for treatment, payment, and healthcare operations. |
consumer reporting agency | agency regulated by the Federal Trade Commission (FTC) under the Fair Credit Reporting Act (FCRA) that sells or cooperatively exchanges consumer credit information and history. |
covered entities | healthcare provides, health plans, and healthcare clearinghouses that transmit health information electronically. |
disclosure | giving access to, releasing, or transferring information to a person or entity. |
ethics | rules and standards of conduct that govern professional behavior and arise from our shared understanding of morality. |
law | formal enforceable rules and policies based on community standards of conduct. |
minimum necessary standard | key provision of the HIPAA req that covered entities limit unnecessary or inappropriate access to and disclosure of protected health information. Disclosures should include only the minimum necessary amount of information to accomplish a given purpose. |
off-label indication | use for a prescription drug other than that for which the US Food and Drug Administration (FDA) has approved it. |
password | A sequence of characters and sometimes spaces used to prevent unauthorized access to or disclosure of patient information contained in secure electronic files. |
privacy | pt's freedom to determine when, how much, and under what circumstances his or her medical info may be disclosed. the patient's right and expectation that individually identifiable health info will be kept private and not disclosed w/o the pt's permission |
protected health information (PHI) | individually identifiable health information that is stored, maintained, or transmitted electronically. |
safeguards | measures taken to prevent interference with computer network operations and to advert security breaches involving the unauth use, disclosure, mods, erasure, or destruction of PHI, measures are specified by the HIPAA , applies only to data in elect form. |
screen saver | a program that displays animation or image on the screen if input (such as pressing a key) is not received for a given time period. |
secondary use | use of health info that is not directly related to pt care. such use includes statistical analysis, research, quality and safety assurance processes, public health monitoring, payment, provider certification or accreditation, and marketing. |