click below
click below
Normal Size Small Size show me how
HIPPA
CMAA
| Term | Definition |
|---|---|
| Protected Health Information (PHI) | Any identifiable health information in any form—written, electronic, or verbal—is protected by the Privacy Rule. |
| Electronic Protected Health Information (ePHI) | is any identifiable patient data that is either stored or transmitted in electronic form. |
| Covered Entities | HIPAA identifies a variety of providers as |
| Health Plans | Any company or group that pays for medical care. |
| Healthcare Providers | Any provider (hospital, doctor, dentist, pharmacy) that electronically transmits health information for transactions. |
| Healthcare Clearinghouse | Organizations that process certain health information (such as converting diagnostic and treatment information into electronic bills). |
| Business Associate | A business that provides services to a covered entity and may come into contact with PHI is known as a |
| Health Information Technology for Economic and Clinical Health (HITECH) Act | of 2009 included the requirement that business associates comply with HIPAA to the same extent as covered entities. |
| Security Rule | protects electronic health information that is stored or transmitted. Broken down into standards and implementation specifications, the Security Rule governs the confidentiality, integrity, and availability (CIA) of electronic health information. |
| Privacy Rule | which governs the use and disclosure of protected health information (PHI). |
| Minimum Necessary | access guides all sharing of PHI. Only the minimum amount of information needed to meet a legitimate purpose should be shared. |
| Notice of Privacy Practices (NPP) | describing how the organization will use patient records. |