public health and hipaa - dhss · march 2006 delaware’s division of public health 17 appropriate...
TRANSCRIPT
![Page 1: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/1.jpg)
March 2006 Delaware’s Division of Public Health 1
HIPAA And Public Health
![Page 2: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/2.jpg)
March 2006 Delaware’s Division of Public Health 2
HIPAA
The purpose for HIPAA (Health Insurance Portability &
Accountability Act) is to protect the confidentiality, integrity,
and availability of an individual’s medical information.
![Page 3: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/3.jpg)
March 2006 Delaware’s Division of Public Health 3
Hybrid Entity
Public Health (PH) is considered to be a hybrid entity. PH has
activities that are covered and other activities not covered by
HIPAA.
![Page 4: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/4.jpg)
March 2006 Delaware’s Division of Public Health 4
Public Health & Privacy Rule
The rule recognizes the need for public health authorities and
others responsible for ensuring the Public’s health and safety to have access to sensitive medical
information.
![Page 5: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/5.jpg)
March 2006 Delaware’s Division of Public Health 5
Examples of Health Services
Family PlanningSTD*TB*Child HealthDentalChild Lead Poisoning Screening & Case management* (*hybrid)
![Page 6: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/6.jpg)
March 2006 Delaware’s Division of Public Health 6
Public Health Functions
Public Health surveillanceProgram evaluationEmergency preparednessOutbreak investigationsDirect health servicesPublic Health research
![Page 7: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/7.jpg)
March 2006 Delaware’s Division of Public Health 7
Sharing Medical Information
Reporting of disease, injury, and vital events (e.g., birth or death)
Conducting Public Health surveillance, investigations and interventions such as a person who may have been exposed to a communicable disease or may be at risk for contracting or spreading a
disease or condition
![Page 8: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/8.jpg)
March 2006 Delaware’s Division of Public Health 8
Sharing Medical Information
Reporting child abuse or neglect to a public health or other government authority legally authorized to receive reportsA person subject to jurisdiction of the Food and Drug Administration (FDA) concerning the quality, safety, or effectiveness of an FDA-related product or activity for which that person has responsibility
![Page 9: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/9.jpg)
March 2006 Delaware’s Division of Public Health 9
Password
Use strong passwords (at least 6 characters, containing a combination of letters or numbers)Change your passwordsDo not share your passwordsIf you MUST write down your passwords
Store it in a secure locationDO NOT store under your desktop or post it
![Page 10: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/10.jpg)
March 2006 Delaware’s Division of Public Health 10
How is PHI transmitted?
By sightBy face-to-face interactionsBy faxBy emailBy phoneBy mail
![Page 11: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/11.jpg)
March 2006 Delaware’s Division of Public Health 11
Minimize Visual Misuse of PHI
Clean desk policyPlacing medical charts with name faced inward in chart holderTurning monitors away from general publicRestricting access to areas where PHI is openly displayedShredding documents before putting in trash
![Page 12: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/12.jpg)
March 2006 Delaware’s Division of Public Health 12
Face-to Face Use of PHI
Conduct conversations in areas apart from othersSpeak in a low clear voiceIf referencing a document, don’t show document to another if there is information that the other should not haveMake sure no documents are left behind before ending conversation
![Page 13: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/13.jpg)
March 2006 Delaware’s Division of Public Health 13
Faxing Sensitive Medical Information
Call to let the receiver know when you are ready to send faxVerify fax number before sending Use a cover sheetVerify that the information was receivedFax sensitive medical information only when absolutely necessary Document if it was unintentionally sent to the incorrect number
![Page 14: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/14.jpg)
March 2006 Delaware’s Division of Public Health 14
Use of email
Verify the email address before sendingConfirm with the receiver that the receiver’s email account is password protectedSet your email setting to notify you when an email has been received and opened
![Page 15: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/15.jpg)
March 2006 Delaware’s Division of Public Health 15
Sharing PHI Over the Phone
When caller is calling only to confirm details already known by the caller, do NOT volunteer new informationTake the organization’s name and main number, the caller’s name and caller’s extension number. Hang up. Call them back – immediately if its an emergencyTo confirm the caller is who they say they are, check the individual’s record and confirm details such as DOB, address, etc
![Page 16: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/16.jpg)
March 2006 Delaware’s Division of Public Health 16
Use of mail
Always address confidential material to named addresseeMark the package to show that it contains private informationVerify the postal address to which you are sending the PHITape seals to the package and sign with your signature over the tape
![Page 17: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/17.jpg)
March 2006 Delaware’s Division of Public Health 17
Appropriate Disposal of Data
All sensitive medical information needs to be properly and appropriately disposed.NO PHI should be placed in the trashCD ROM disks must be rendered unreadable by shredding, breakingAll paper with PHI must be properly disposed of….possibly cross-cut shredder
![Page 18: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/18.jpg)
March 2006 Delaware’s Division of Public Health 18
Physical Safeguards
Use appropriate facilities & securityWorkstations Use & Security policiesFax machines, copies and printers are physically securedServers and mainframes must be protected and access controlled
![Page 19: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/19.jpg)
March 2006 Delaware’s Division of Public Health 19
Something to Keep in Mind
PHI should be seen by only those who are authorized to see it.
![Page 20: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/20.jpg)
March 2006 Delaware’s Division of Public Health 20
Something to Keep in Mind
PHI should be transmitted or shared with only those who are
authorized to receive it.
PHI should be heard by only those who are authorized to hear it.
![Page 21: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/21.jpg)
March 2006 Delaware’s Division of Public Health 21
Enforcements for Privacy and Security
Enforced by different agenciesOffice of Civil Rights (OCR) enforces privacy with civil penaltiesDepartment of Justice (DOJ) enforces privacy with criminal penaltiesCenter for Medicare/Medicaid (CMS) enforces security
![Page 22: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/22.jpg)
March 2006 Delaware’s Division of Public Health 22
What Are the Penalties?
HIPAA calls for severe civil and criminal penalties for noncompliance, including:Fines up to $25K for multiple violations of the same standard in a calendar yearFines up to $250K and/or imprisonment up to 10 years for knowing misuse of sensitive health information
![Page 23: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/23.jpg)
March 2006 Delaware’s Division of Public Health 23
Summary
ALL sensitive medical information needs to be treated as confidentialComply with DHSS and DPH policies and proceduresInformation should only be accessed and shared by authorized staff Protect all information and report any misuse of protected health information
![Page 24: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/24.jpg)
March 2006 Delaware’s Division of Public Health 24
Resources
HIPAA Coordinatorhttp://www.hhs.gov/ocr/hipaa/http://www.dhss.delaware.gov/dhss/dph/hipaa.htmlhttp://www.hhs.gov/ocr/hipaa/guidelines/guidanceallsections.pdf
![Page 25: Public Health and HIPAA - DHSS · March 2006 Delaware’s Division of Public Health 17 Appropriate Disposal of Data All sensitive medical information needs to be properly and appropriately](https://reader033.vdocuments.net/reader033/viewer/2022052720/5f08eaf87e708231d4245a9b/html5/thumbnails/25.jpg)
March 2006 Delaware’s Division of Public Health 25
Questions?
Contact:HIPAA Coordinator
Division of Public HealthJesse Cooper Building
Support Services(302) 744.4706