click below
click below
Normal Size Small Size show me how
MedLaw&Ethics HIPAA
HIPAA terms
Question | Answer |
---|---|
A private or public healthcare entity that processes nonstandard electronic transactions into HIPAA transactions (billing co.) | Clearinghouse |
Healthcare organizations covered under HIPAA that handle electronic PHI | Covered Entities |
Providers, clearinghouses, billing companies | Examples of covered entities |
A number assigned to an employer for purposes of identification (tax purposes) | Employer Identification Number (EIN) |
A national data bank that collects and reports disclosures of actions taken against healthcare practitioners, providers and vendors for noncompliance and fraudulent activities | Healthcare Integrity and Protection Data Bank (HIPDB) |
Regulates the privacy and security of patients health information, sets standards for transactions, and allows easier transfer of insurance for patients | Health Insurance Portability and Accountability Act (HIPAA) |
Permission to use information based on the reason for knowing, or use of, the information | HIPAA-defined permissions |
the application of communication and information to medical practice, research, and education | medical informatics |
the provider must make a reasonable effort to limit the disclosure of patient information to only the minimum amount necessary to accomplish the purpose of the request | minimum necessary standard |
a written statement the details the providers privacy practices | Notice of Privacy Practices (NPP) |
the federal office that investigates violations of HIPAA | Office of Civil Rights |
Title II of the HIPAA | Privacy Rule |
individually identifiable information that relates to the physical or mental condition or the provision of health care to an individual | protected health information |
occurs when the state privacy laws are stricter than the privacy standards established by HIPAA | State's pre-emption |
the use of communications and information technologies to provide healthcare services to people at a distance | telemedicine |
what the covered entity may use PHI for without the patient's authorization | TPO |
a wireless system that is used by physicians and nurses to access patient information | Wireless Local Area Network (WLAN) |
Stays within the covered entity and is used for purposes of the entity | Use of PHI |
the covered entity releases PHI to a third party outside of the entity | Disclosure of PHI |
Needed for TPO and does not need to be written | Consent |
gives permission for release of PHI for reasons other than TPO, has to be written, signed and dated | Authorization |
Reasons for disclosure of PHI that are a threat to public health, law enforcement, organ donations and workers compensation | Public interest |
the removal of all individually identifiable information form a medical record | de-identify |
allows a covered entity to disclose PHI without authorization | subpoena or court order |
HIPAA approved code set for diagnoses and inpatient procedures | ICD-9-CM |
HIPAA approved code set for outpatient procedures | CPT-4 |