Copy of Compliance
No Description
MORE DECKS TO EXPLORE
PRESENTATION OUTLINE
Medical Record Privacy Act
AND
Identity Theft Enforcement & Protection Act
Tthese are the two primary TX Acts: TMRPA under the Health and Safety Code at Chapter 181 and ITEPA under Business and Commerce Code at Chapter 521
other state laws affect both of these
other state laws affect both of these
Photo by Don J Schulte
http://hipaanews.org/
Both Federal and State Laws Continue to Change
Photo by Andreanna Moya Photography
Are You a Covered Entity?
Yes, if you
Collect
Store
Use or Disclose
Transmit or
Destroy
PHI or SPI
PHI & SPI
Protected Health Information & Sensitive Personal Information
As a Covered Entity, you must abide by HIPAA and State Laws to protect PHI and SPI
Photo by seanmcgrath
Protected Health Information:
Individually Identifiable Physical & Mental Health or Condition
Includes payment and the provision of healthcare
and past present and future health and conditions
and past present and future health and conditions
Photo by KayVee.INC
Sensitive Personal Info
PHI or Financial Info
Means an individual's first name or first initial and last name in combo w/ any one or more of the following items, if the name and items are not encrypted: SSN, Drivers License # or Gov't issued ID, account # or Credit or Debit Card number w/ any required security access code or password; or information that identifies a person and relates to PHI
Photo by Leo Reynolds
Privacy & Security
Photo by garryknight
Privacy
- Identify PHI and SPI
- Minimum Necessary Use
- Safeguarding PHI and SPI
- No release w/o consent
- Sanctions
- Retention and Destruction
Identify PHI & SPI
- How do you collect & use it?
- How do you safeguard it in all forms: oral, written, electronic
Photo by Images_of_Money
Minimum Necessary Use
- Use by consent only
- Use for purpose intended
- No further disclosure
Photo by liquidnight
Safeguarding
- Conversations
- Secure storage
- Proper Destruction
- Careful Transmission
Photo by Fran García Salomón
Retention & Destruction
- Maintain PHI and SPI as necessary
- Destroy by shredding, erasing, or other means so that the info is unreadable
Workforce Training
- Every two years
- Within one year if a material change in the law occurs
Texas law mandates training regarding PHI at least every two years, but more often is advisable.
If the duties of an employee are affected by a material change in state or federal law concerning PHI, the employee will receive training within a reasonable period but not later than the first anniversary of the dat the material change in law takes effect.
If the duties of an employee are affected by a material change in state or federal law concerning PHI, the employee will receive training within a reasonable period but not later than the first anniversary of the dat the material change in law takes effect.
Photo by salendron
