HIPAA for HCIRs (Sales Professional)

HIPAA for HCIRs (Sales Professionals)

(HIPAA Privacy, Security, and Enforcement Training)

Table of Contents:

• HIPAA for Health Industry Representative
• Legal Notice
• Purpose of Course
• Objectives
• What is HIPAA?
• Who Must Abide by HIPAA Rules?
• Covered Entities
• Business Associates
• Expanded Definition of Business Associates
• Business Associates Agreements
• How does this Apply to a Health Care Industry Representative?
• HIPAA Privacy Rule
• Permitted Use and Disclosure of PHI
• Incidental Use and Disclosure of PHI
• Authorized Use and Disclosure of PHI
• Notice of Privacy Practices
• Individual Rights Under the Privacy Rule
• ONC Cures Act Final Rule - 2021/2022 Update
• CMS Final Rule - 2021/2022 Update
• "Minimum Necessary" Principal
• Additional Means of Ensuring Privacy Rule Compliance
• HIPAA Security Rule
• Administrative Safeguards
• Physical Safeguards
• Technical Safeguards
• HIPAA Breach Notification
• What if a Breach is Discovered?
• HIPAA Enforcement Rule
• HIPAA Enforcement Rule Penalties
• Recent Updates to HIPAA Opioid Crisis
• Recent Updates to HIPAA Cloud Computing
• Real Life Examples of HIPAA Breach and Violations
• HIPAA Implications for HCIRs
• Common Questions Regarding HIPAA as it Applies to HCIRs
• HCIRs Scenarios
• End of Course Exam

Course Content Example 1:

What is HIPAA?

Health Insurance Portability and Accountability Act (HIPAA) of 1996

• Created over 20 years ago, HIPAA had two objectives:
• To provide health insurance coverage for individuals leaving or changing jobs
• To save money and increase efficiency of the health care system by creating standards for electronic transactions, such as computerized physician order entry, electronic health records, electronic access to claims information and payment
• These objectives caused concerns regarding the privacy and security of individual health information, so HIPAA legislation helped create rules to address this
• Modifications have been made to HIPAA over the last 20+ years as a result of the HITECH Act of 2009 and the Omnibus Fine Rule of 2013. These changes included:
• Strengthening existing HIPAA requirements for Privacy and Security
• Expanded individual's rights relating to their Protected Health Information (PHI)
• Increased enforcement of HIPAA, including higher fines for non-compliance
• Addressed notification of breaches of PHI

Course Content Example 2:

HIPAA Implications for HCIRs

It is important to determine if an HCIR's job duties requires access to PHI and if so, privacy and security measures should be taken.

Some ways to ensure proper handling of PHI include:

• Don't be negligent with any type of patient information whether written, oral, or electronic
• Make sure to properly dispose of or shred any documents that contain PHI
• Set Security codes on smart phones or automatic locks on computers that contain PHI
• Only transmit emails with PHI over a secured network