Presentation on theme: "What Nurses Assistants Need to Know about HIPAA"— Presentation transcript:
1 What Nurses Assistants Need to Know about HIPAA YAYA Medical Training Institute
2 Health Insurance Portability and Accountability Act (HIPAA) In mid 1990s Congress passed the Health Insurance Portability and Accountability Act (HIPAA) of As a step toward portability, HIPAA called for rules that would:Provide administrative simplification, basically by standardizing the interchange of medical dataProtect patient confidentialityProtect the security of patient dataThe law also provided for significant fines for violating standards (for wrongful disclosure of medical data)
3 Purpose of Module : HIPAA The purpose of this module is to provide the Nurse Assistants with an understanding of what they need to know about HIPAA regulations and how they affect the day-to-day decisions concerning patient care
4 Objectives of ModuleAfter reviewing this module, you should be able to :Describe the intent of the HIPAA regulationDescribe how HIPAA affects confidentialityDescribe how HIPAA affects information transfer
5 IntroductionComputers are being used more commonly in healthcare, and proved tremendous benefitSpeed up proceduresEase of communicationAccess to patient dataAccess to lab findingsHowever, there has also been a growing fear that this increasing use of computers for storing and transmitting patient information may undermine patient confidentiality
6 HIPAA HIPAA addresses these problems along three major avenues: Administrative simplificationPatient ConfidentialityData Security
7 Administrative Simplification This will involve the personnel in information systems, medical records and administration.However, nurse assistants may be required to use new data gathering tools, new forms or programs due to the HIPAA processA move to standardize the coding of electronic transfer of data to insurance agencies and other payers will be implemented with the HIPAA
8 Confidentiality This section will affect nursing greatly “General rule is that patient authorization is required for any use or disclosure of protected information that is not directly related to treatment, payment or health operations”This is to prevent unauthorized disclosures to anyone outside the agency or within the agency
9 Confidentiality in Special Settings Home Health – Must not forget that the nurse assistant is not a friend of the patient, but is a caregiver even though the setting is more relaxed. Be careful NOT to reveal confidential information to neighbors, family or friendsLong Term Care – In long term care residents have gotten to know one another, there may be questions about another resident. AVOID discussing a resident’s condition with another resident.
10 Confidentiality in Special Settings Psychiatric /Chemical Dependency Units –The law requires much more stringent protection of privacy in these settings. It is a violation of federal law to reveal or even confirm the identity of a patient in any psychiatric setting or chemical rehab.Other special CircumstancesHIVPregnancySexual AbuseRapeThese patients are may be at risk for breach of confidentiality. Normally parents of minors are automatically given information regarding their child’s condition, but law varies from State to State. Know your state’s law.
11 Reporting Laws and Confidentiality There are some exceptions to a caregiver’s obligation to keep information confidentialThreatsPatients in psychiatric setting sometimes make threats to harm others. DO NOT try to decide if a threat is serious. REPORT any threats to your supervisor immediately.Suspected AbuseWhen you encounter any patient who appears to have been physically abused, you have a duty to report your suspicions. Report any suspected abuse to the nurse or call the domestic abuse hotline.
12 Other exceptions to confidentiality Criminal WoundsGunshotsPoisoningsCommunicable Diseases and Emergency CircumstancesDeaths of an Uncertain NatureReport to your supervisor and follow agency/state guidelines
13 How does this affect you? If you receive a fax, it must be placed in a secured area, face downDO NOT XEROX portions of the patient’s chart, MAR, Lab/diagnostic findingsDO NOT DOWNLOAD patient information from the computerDO NOT TAKE any patient information home
14 Who Must Comply?HIPAA law defines those who must comply as: All persons involved with access to patient information and medical records. (This includes Nurse Assistants and Home Health Aides)Protected health information includes, but is NOT limited to:Social Security NumberNameAddress and phone number/ Fax numberDate of birthDiagnosisaddressMedical record numberAny account numbers or patient information identifying the patient
15 Data SecurityThe third major portion of HIPAA is directly related to confidentiality. This is the maintaining the security of patient data, particularly when it is transmitted outside the institution.Each agency will have a policy and procedure for the handling of transmission, security of computer systems and codes
16 PenaltyUnder HIPAA, civil and even criminal penalties can be imposed on organizations and individuals for wrongful disclosure or other forms of noncompliance. Wrongful disclosure is defined as either knowingly or unknowingly sharing or disclosing information without patient/resident permission.A facility that does not follow these rules may:Be responsible for civil penalties and fines that can quickly add up to thousands of dollars.Be accused of criminal violations that can result in even higher fines and incarcerationBe excluded from participation in the Medicare Reimbursement Program
17 Penalties portion of HIPAA Civil money penalties are $ per violation, up to $25,000 per year for each requirement or prohibition violatedCriminal penalties are up to $50,000 and one year in prison for certain offenses.Up to $100,000 fines and up to 5 years in prison if the offenses are committed under false pretensesUp to $250,00 in fines and up to 10 years in prison if the information obtain is found to be used for commercial advantage, personal gain or malicious harm
18 ConclusionAccording to HIPAA legislation, when information must be communicated, you must make sure it is for treatment or billing or other uses within the law and within the policies/procedures of your facilitySo before you answer the phone when someone asks you if a certain celebrity is a patient in your hospital…think again!You will be violating HIPPA if you do not have the patient’s permission to share that information.
19 ReferencesCichon, T. (2002) Can you pass the HHN’s HIPAA Quiz? Home HealthNurse. 20(6), 400 – 401.How HIPAA will change your practice.(2002) Nursing. 32(9),Maio, J. (2003) HIPAA and the Special status of psychotherapy notes.Lippincott’s Case Management. 8(1), 24-29The New HIPAA Law on Privacy and Confidentiality. (2002) Nursing Administration Quarterly. 26(4)Oram, M. (2003) CEU: HIPAA Regulations Update Course # 106What you need to know about HIPAA. CEU Course: RN.comWilber, K. (2003) HIPAA Security Requirements: Prepare to Comply.Healthcare. article/448840Williams, T. (2002) HIPAA… one size does not necessary fit all. HomeHealthcare Nurse. 20(4)Ziel, S. (2002) Legal checkpoints: Get on board with HIPAA privacyregulations. Nursing Management. 23(10), 28-29