HIPAA Privacy Regulations Flashcards

A set of vocabulary flashcards based on HIPAA privacy regulations, covering key legal definitions, entities, and penalty structures.

HIPAA

The Health Information Portability and Accountability Act of $1996$ and all of its related regulations.

Covered Entity (CE)

An organization subject to HIPAA, including health insurers, pharmacists, doctors, EMS personnel, and any other health care providers with access to protected health information.

Health Care Clearinghouses

A type of Covered Entity defined as a billing company or medical claims processor.

Health Plans

An HMO or group health plan that provides health benefits to a company's employees, such as United Healthcare or Blue Cross/Blue Shield.

Health Care Providers

Physicians, hospitals, ambulance services, and home health agencies that electronically transmit health insurance transactions subject to HIPAA, such as billing or referrals.

Business Associate (BA)

An individual or organization not part of the Covered Entity's workforce that performs services involving the use or disclosure of PHI on behalf of the Covered Entity.

Personal Health Information (PHI)

Information protected under law created or received by a Covered Entity that identifies an individual and relates to their past, present, or future physical or mental condition.

Access

The ability to read, write, modify, or communicate data or information or otherwise use any information system source.

Authorization

A written document that allows the use or disclosure of PHI for purposes other than treatment, payment, or health care options.

Confidentiality

The property of data or information being private, restricted, or unavailable for disclosure to unauthorized persons or processes.

Identifiers

Any form of information that may be used to identify a patient at any time.

Information System

Information resources including software, hardware, information, data, applications, communications, and people.

User

A person or entity with authorized access to data or systems.

Workforce

Employees, volunteers, trainees, students, or other persons whose conduct is under the direct control of the Covered Entity.

HIPAA Supremacy Rule

A federal law that supersedes state law unless the state law is more protective of PHI than the protections afforded by HIPAA.

Civil Penalties

Fines of up to $100.00/\text{violation}$ with a maximum total fine not to exceed $25,000.00$ and a potential prison sentence of up to $10$ years or both.

Criminal Penalties

Fines and jail time for non-compliance with a maximum fine of up to $250,000.00$ and a prison sentence up to $10$ years or both.

Central New Mexico Community College

An example of a Business Associate (BA) whose students must be familiar with HIPAA regulations when entering a Covered Entity's workplace.