Source: http://www.science.gov/topicpages/a/accountability+act+hipaa.html
Timestamp: 2016-10-26 04:03:19
Document Index: 20855629

Matched Legal Cases: ['ART 310', '§ 310', 'art 64', 'ART 310', '§ 310', 'art 64', 'art 7', 'art 160', 'art 164']

accountability act hipaa: Topics by Science.gov
Sample records for accountability act hipaa
The Relationship of HIPAA to Special Education
Benitz, Catherine, Comp.
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) includes important, but limited, protections for millions of working Americans and their families around the ability to obtain and keep health coverage. Among its specific protections, HIPAA: (1) Limits the use of preexisting condition exclusions; (2) Prohibits group health…
Clouds and rainbows on the HIPAA horizon.
Tennant, R M
In the planning phase for several years, the administrative simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) finally appear ready for implementation. The Health Care Financing Administration (HCFA) expects that the major HIPAA measures will be released in late 1999. For group practices, it is expected that implementation of these provisions will be complicated and consume significant amounts of time and money. Still, the end result should justify the effort. PMID:10788078
HIPAA's transactions regulations. Where are we today?
Callahan-Morris, Elizabeth; Shields, Juli K
By now, the health care industry is feeling the effects of the implementation of the Standards for Electronic Transactions promulgated under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The standards, or transaction rule, have been substantially in final form since Aug. 17, 2000, but it has taken the industry every bit of the allotted time period, including a one-year extension, to work through the technical and interpretative issues to meet the Oct. 16, 2003, compliance deadline. PMID:14628326
Alberts, Christopher J.; Dorofee, Audrey
The Health Insurance Portability and Accountability Act of 1996 (PL 104-191), known as HIPAA, has confused and unnecessarily alarmed many conscientious health care providers. Nurses in particular are likely to be on the front line of family caregivers' inquiries, because physicians are often difficult to reach and because family caregivers look to nurses as sources of reliable information. A major retraining of health care providers at all levels is needed to dampen the "HIPAA scare" and clarify what HIPAA does and does not say about communication with family caregivers. PMID:16905933
Liu, Brent J.; Zhou, Zheng; Huang, H. K.
Context: Confidentiality of personal health information is an ethical principle and a legislated mandate; however, the impact of the Health Insurance Portability and Accountability Act (HIPAA) on ethics committees ethics committees is limited. Purpose: This study investigates the prevalence, activity, and composition of ethics committees located…
Lam, Peifung E.; Mitchell, John C.; Sundaram, Sharada
Karasz, Hilary N.; Eiden, Amy; Bogan, Sharon
Text messaging is a powerful communication tool for public health purposes, particularly because of the potential to customize messages to meet individuals’ needs. However, using text messaging to send personal health information requires analysis of laws addressing the protection of electronic health information. The Health Insurance Portability and Accountability Act (HIPAA) Security Rule is written with flexibility to account for changing technologies. In practice, however, the rule leads to uncertainty about how to make text messaging policy decisions. Text messaging to send health information can be implemented in a public health setting through 2 possible approaches: restructuring text messages to remove personal health information and retaining limited personal health information in the message but conducting a risk analysis and satisfying other requirements to meet the HIPAA Security Rule. PMID:23409902
Jin, Jin; Zhang, Jianguo; Chen, Xiaomeng; Sun, Jianyong; Yang, Yuanyuan; Liang, Chenwen; Feng, Jie; Sheng, Liwei; Huang, H. K.
Development and testing of a CD-ROM based tutorial for nursing students: getting ready for HIPAA.
Feeg, Veronica D; Bashatah, Adel; Langley, Christena
The purpose of this study was to develop and test a CD-ROM tutorial for nursing students to educate them on how the rules and regulations of the Health Insurance Portability and Accountability Act (HIPAA) affect them as they engage in patient care activities in hospitals. The project was completed in two parts, the first of which was production of a stand-alone, audio lecture, image and text self-instruction on CD-ROM to distribute to students as they began their clinical experience. The second part compared the effectiveness of learning the HIPAA content via CD-ROM to a text-directed, self study method. Students were pretested and randomly assigned to one of the types of instruction based on their seminar group assignment. One group received the CD-ROM, Getting Started with HIPAA, along with a journal article on HIPAA, while the other (control) group received only the journal article. All students were instructed to prepare for a test on their understanding about HIPAA by the end of the clinical rotation. The test was analyzed, and items clarified to yield a reliable Web-based examination with 20 questions, 18 of which were used in the analysis. The students' scores were analyzed before and after the instruction, and the methods of instruction were compared. The study findings demonstrated significant differences between experimental-group and control-group students' performance on a knowledge test of HIPAA, as well as overall satisfaction with learning the material by CD-ROM among students who used it. The tutorial is now available for all students, and the Web-based examination provides automatic scoring to a preestablished competence level. PMID:16130345
Medical image security in a HIPAA mandated PACS environment.
Cao, F; Huang, H K; Zhou, X Q
Medical image security is an important issue when digital images and their pertinent patient information are transmitted across public networks. Mandates for ensuring health data security have been issued by the federal government such as Health Insurance Portability and Accountability Act (HIPAA), where healthcare institutions are obliged to take appropriate measures to ensure that patient information is only provided to people who have a professional need. Guidelines, such as digital imaging and communication in medicine (DICOM) standards that deal with security issues, continue to be published by organizing bodies in healthcare. However, there are many differences in implementation especially for an integrated system like picture archiving and communication system (PACS), and the infrastructure to deploy these security standards is often lacking. Over the past 6 years, members in the Image Processing and Informatics Laboratory, Childrens Hospital, Los Angeles/University of Southern California, have actively researched image security issues related to PACS and teleradiology. The paper summarizes our previous work and presents an approach to further research on the digital envelope (DE) concept that provides image integrity and security assurance in addition to conventional network security protection. The DE, including the digital signature (DS) of the image as well as encrypted patient information from the DICOM image header, can be embedded in the background area of the image as an invisible permanent watermark. The paper outlines the systematic development, evaluation and deployment of the DE method in a PACS environment. We have also proposed a dedicated PACS security server that will act as an image authority to check and certify the image origin and integrity upon request by a user, and meanwhile act also as a secure DICOM gateway to the outside connections and a PACS operation monitor for HIPAA supporting information. PMID:12620309
Sengupta, Soumitra; Calman, Neil S; Hripcsak, George
The advent of electronic medical records and health information exchange raise the possibility of expanding public health reporting to detect a broad range of clinical conditions and of monitoring the health of the public on a broad scale. Expanding public health reporting may require patient anonymity, matching records, re-identifying cases, and recording patient characteristics for localization. The privacy regulations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) provide several mechanisms for public health surveillance, including using laws and regulations, public health activities, de-identification, research waivers, and limited data sets, and in addition, surveillance may be distributed with aggregate reporting. The appropriateness of these approaches varies with the definition of what data may be included, the requirements of the minimum necessary standard, the accounting of disclosures, and the feasibility of the approach. PMID:18579843
Lee, Wei-Bin; Lee, Chien-Ding; Ho, Kevin I-J
Patient control over electronic protected health information (ePHI) is one of the major concerns in the Health Insurance and Accountability Act (HIPAA). In this paper, a new key management scheme is proposed to facilitate control by providing two functionalities. First, a patient can authorize more than one healthcare institute within a designated time period to access his or her ePHIs. Second, a patient can revoke authorization and add new authorized institutes at any time as necessary. In the design, it is not required to re-encrypt ePHIs for adding and revoking authorizations, and the implementation is time- and cost-efficient. Consent exception is also considered by the proposed scheme. PMID:24480372
Luxton, David D; Kayl, Robert A; Mishkind, Matthew C
The rise in the use of mobile devices, such as smartphones, tablet personal computers, and wireless medical devices, as well as the wireless networks that enable their use, has raised new concerns for data security and integrity. Standardized Health Insurance Portability and Accountability Act of 1996 (HIPAA)-compliant electronic data security that will allow ubiquitous use of mobile health technologies is needed. The lack of standardized data security to assure privacy, to allow interoperability, and to maximize the full capabilities of mobile devices presents a significant barrier to care. The purpose of this article is to provide an overview of the issue and to encourage discussion of this important topic. Current security needs, standards, limitations, and recommendations for how to address this barrier to care are discussed. PMID:22400974
Update: electronic transactions, HIPAA, and Medicare reimbursement.
McMahon, Erin Brisbay
Physician practices that transmit any health information in electronic form in connection with a transaction covered by the HIPAA transactions and code sets rule will be required to comply with the rule no later than October 16, 2003. Under the rule, if certain transactions, such as the filing of claims, are conducted electronically, they must contain certain data content and be formatted in a particular way. On and after October 16, 2003, Medicare will require claims to be submitted electronically unless a physician practice has less than 10 full-time equivalent employees. Practices with fewer than 10 FTEs can continue to submit paper claims to Medicare without any further action on their part. At a minimum, physician practices must have the ability to capture the data required by the rule for covered transactions conducted electronically, and either use a clearinghouse to translate the data to X12N format or obtain a translator and electronic connectivity to ensure that the practice can send electronically compliant claims by October 16, 2003. Trading partner agreements may specify the duties and responsibilities of each party to the agreement in conducting a covered transaction electronically, but they are not required under HIPAA. Business associate agreements are required under HIPAA if a practice chooses to use a business associate (a person who performs an activity falling under the rule on behalf of the practice), including a health care clearinghouse, to conduct electronic covered transactions for it, and the agreement must comply with the HIPAA transactions and code sets rule, the privacy rule, and the security rule. This article is not, and should not be construed as, legal advice or an opinion on specific situations. PMID:16871309
Scheinfeld, Noah; Rothstein, Brooke
From smart phones to iPads, the world has grown increasingly reliant on new technology. In this ever-expanding digital age, medicine is at the forefront of these new technologies. In the field of dermatology and general medicine, digital images have become an important tool used in patient management. Today, one can even find physicians who use their cellular phone cameras to take patient images and transmit them to other physicians. However, as digital imaging technology has become more prevalent so too have concerns about the impact of this technology on the electronic medical record, quality of patient care, and medicolegal issues. This article will discuss the advent of digital imaging technology in dermatology and the legal ramifications digital images have on medical care, abiding by HIPAA, the use of digital images as evidence, and the possible abuses digital images can pose in a health care setting. PMID:24800426
HIPAA strengthens business case for electronic report distribution systems.
HIPAA may finally force healthcare organizations to make long-postponed decisions to increase the use of automation and technology for report distribution. For most, the direct benefits will far outweigh the costs. PMID:12119846
HIPAA Compliance with Mobile Devices Among ACGME Programs.
McKnight, Randall; Franko, Orrin
To analyze self-reported HIPAA compliance with mobile technologies among residents, fellows, and attendings at ACGME training programs. A digital survey was sent to 678 academic institutions over a 1-month period. 2427 responses were analyzed using Chi-squared tests for independence. Post-hoc Bonferroni correction was applied for all comparisons between training levels, clinical setting, and specialty. 58 % of all residents self-report violating HIPAA by sharing protected health information (PHI) via text messaging with 27 % reporting they do it "often" or "routinely" compared to 15-19 % of attendings. For all specialties, 35 % of residents use text messaging photo or video sharing with PHI. Overall, 5 % of respondents "often" or "routinely" used HIPAA compliant (HCApps) with no significant differences related to training level. 20 % of residents admitted to using non-encrypted email at some point. 53 % of attendings and 41 % of residents utilized encrypted email routinely. Physicians from surgical specialties compared to non-surgical specialties demonstrated higher rates of HIPAA violations with SMS use (35 % vs. 17.7 %), standard photo/video messages (16.3 % vs. 4.7 %), HCApps (10.9 % vs. 4.9 %), and non-HCApps (5.6 % vs 1.5 %). The most significant barriers to complying with HIPAA were inconvenience (58 %), lack of knowledge (37 %), unfamiliarity (34 %), inaccessible (29 %) and habit (24 %). Medical professionals must acknowledge that despite laws to protect patient confidentiality in the era of mobile technology, over 50 % of current medical trainees knowingly violate these rules regularly despite the threat of severe consequences. The medical community must further examine the reason for these inconsistencies and work towards possible solutions. PMID:27079578
Watzlaf, Valerie R.; Ondich, Briana
Consumer-based, free Voice and video over the Internet Protocol (VoIP) software systems such as Skype and others are used by health care providers to deliver telerehabilitation and other health-related services to clients. Privacy and security applications as well as HIPAA compliance within these protocols have been questioned by practitioners, health information managers, and other healthcare entities. This pilot usability study examined whether four respondents who used the top three, free consumer-based, VoIP software systems perceived these VoIP technologies to be private, secure, and HIPAA compliant; most did not. While the pilot study limitations include the number of respondents and systems assessed, the protocol can be applied to future research and replicated for instructional purposes. Recommendations are provided for VoIP companies, providers, and clients/consumers. PMID:25945194
VoIP for Telerehabilitation: A Pilot Usability Study for HIPAA Compliance.
Watzlaf, Valerie R; Ondich, Briana
How the University of Michigan Health System finds opportunity in HIPAA.
Ebel, Colleen
The University of Michigan Health System has dealt with some difficult challenges as a healthcare entity covered by the HIPAA Transaction and Code Sets regulation. It has processed electronic healthcare transactions for several years and faced major system changes to meet the standards. A capital investment in system upgrades and new purchases was inevitable. The organization invested in a systems infrastructure that provides for real-time application integration, which lays the foundation for real-time eligibility and claims processing where health plan systems can communicate with healthcare provider systems. PMID:15162715
... CONGRESS TELEMARKETING SALES RULE 16 CFR PART 310 § 310.4 Abusive telemarketing acts or practices. (a... business associate, as those terms are defined in the HIPAA Privacy Rule, 45 CFR 160.103. (2) It is an... laws, including but not limited to the TCPA, 47 U.S.C. 227, and 47 CFR part 64.1200. (iv) The seller...
... CONGRESS TELEMARKETING SALES RULE 16 CFR PART 310 § 310.4 Abusive telemarketing acts or practices. (a... business associate, as those terms are defined in the HIPAA Privacy Rule, 45 CFR 160.103. (2) It is an... federal laws, including but not limited to the TCPA, 47 U.S.C. 227, and 47 CFR part 64.1200. (iv)...
... Human Services pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA); (3) For any purpose referred to in section 1179 of HIPAA; (4) For any purpose described in section...
75 FR 8750 - Submission for OMB Review: Comment Request
... Portability and Accountability Act of 1996 (HIPAA), codified as Part 7 of Title I of the Employee Retirement... 101(g) of ERISA, HIPAA permits the Secretary of Labor (the Secretary) to require multiple...
Guo, Bing; Documet, Jorge; Liu, Brent; King, Nelson; Shrestha, Rasu; Wang, Kevin; Huang, H. K.; Grant, Edward G.
Bradford, Wayne; Hurdle, John F; LaSalle, Bernie; Facelli, Julio C
High-performance computing centers (HPC) traditionally have far less restrictive privacy management policies than those encountered in healthcare. We show how an HPC can be re-engineered to accommodate clinical data while retaining its utility in computationally intensive tasks such as data mining, machine learning, and statistics. We also discuss deploying protected virtual machines. A critical planning step was to engage the university's information security operations and the information security and privacy office. Access to the environment requires a double authentication mechanism. The first level of authentication requires access to the university's virtual private network and the second requires that the users be listed in the HPC network information service directory. The physical hardware resides in a data center with controlled room access. All employees of the HPC and its users take the university's local Health Insurance Portability and Accountability Act training series. In the first 3 years, researcher count has increased from 6 to 58. PMID:23911553
High-performance computing centers (HPC) traditionally have far less restrictive privacy management policies than those encountered in healthcare. We show how an HPC can be re-engineered to accommodate clinical data while retaining its utility in computationally intensive tasks such as data mining, machine learning, and statistics. We also discuss deploying protected virtual machines. A critical planning step was to engage the university's information security operations and the information security and privacy office. Access to the environment requires a double authentication mechanism. The first level of authentication requires access to the university's virtual private network and the second requires that the users be listed in the HPC network information service directory. The physical hardware resides in a data center with controlled room access. All employees of the HPC and its users take the university's local Health Insurance Portability and Accountability Act training series. In the first 3 years, researcher count has increased from 6 to 58. PMID:23911553
42 CFR 3.20 - Definitions.
... Accountability Act of 1996 (HIPAA), at 45 CFR part 160 and subparts A and E of part 164. Identifiable patient... individually identifiable health information as that term is defined in the HIPAA Privacy Rule at 45 CFR 160.... Research has the same meaning as the term is defined in the HIPAA Privacy Rule at 45 CFR...
Lee, Jasper C.; Ma, Kevin C.; Liu, Brent J.
Freedman, Ralph S; Cantor, Scott B; Merriman, Kelly W; Edgerton, Mary E
In 2013, the U.S. Department of Health and Human Services modified the Health Insurance Portability and Accountability Act Privacy Rule to "strengthen privacy and security protections" while "improving workability and effectiveness to increase flexibility for and decrease burden on regulated entities." In this article, we attempt to translate these generalized goals into the real-world implications of these changes. Under the new rules, researchers can obtain participants' permission to use their protected health information for more research activities with a single, upfront authorization (thereby reducing paperwork for participants, researchers, and institutional review boards) while providing potential participants with more information upon which to base their decisions about participation. The combined authorizations can be used in clinical trials and their optional substudies and in stand-alone biospecimen-banking research that includes authorization to permit future research use. We also suggest best practices for taking advantage of the flexibility offered by the new rules while maintaining strong privacy protections for human subjects. PMID:26832744
Freymann, John B; Kirby, Justin S; Perry, John H; Clunie, David A; Jaffe, C Carl
Data sharing is increasingly recognized as critical to cross-disciplinary research and to assuring scientific validity. Despite National Institutes of Health and National Science Foundation policies encouraging data sharing by grantees, little data sharing of clinical data has in fact occurred. A principal reason often given is the potential of inadvertent violation of the Health Insurance Portability and Accountability Act privacy regulations. While regulations specify the components of private health information that should be protected, there are no commonly accepted methods to de-identify clinical data objects such as images. This leads institutions to take conservative risk-averse positions on data sharing. In imaging trials, where images are coded according to the Digital Imaging and Communications in Medicine (DICOM) standard, the complexity of the data objects and the flexibility of the DICOM standard have made it especially difficult to meet privacy protection objectives. The recent release of DICOM Supplement 142 on image de-identification has removed much of this impediment. This article describes the development of an open-source software suite that implements DICOM Supplement 142 as part of the National Biomedical Imaging Archive (NBIA). It also describes the lessons learned by the authors as NBIA has acquired more than 20 image collections encompassing over 30 million images. PMID:22038512
77 FR 14807 - Emergency Clearance: Public Information Collection Requirements Submitted to the Office of...
... Information Collection: Pre-Existing Condition Insurance Plan (PCIP) HIPAA Authorization Form; Use: Unless permitted or required by law, the Health Insurance Portability and Accountability Act (HIPAA) privacy regulation at 45 CFR 164.508 prohibits CMS' Pre-Existing Condition Insurance Plan (PCIP) program (a...
07/17/2013 Read twice and referred to the Committee on Homeland Security and Governmental Affairs. (All Actions) Tracker: This bill has the status IntroducedHere are the steps for Status of Legislation:
04/15/2013 On motion to suspend the rules and pass the bill Failed by the Yeas and Nays: (2/3 required): 250 - 159 (Roll no. 105). (consideration: CR H2012) (All Actions) Tracker: This bill has the status Failed HouseHere are the steps for Status of Legislation:
08/01/2012 Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs. (All Actions) Tracker: This bill has the status Passed HouseHere are the steps for Status of Legislation:
Rep. Hultgren, Randy [R-IL-14
03/07/2012 Read twice and referred to the Committee on the Judiciary. (text of measure as introduced: CR S1461) (All Actions) Tracker: This bill has the status IntroducedHere are the steps for Status of Legislation:
THOMAS, 113th Congress Rep. Lynch, Stephen F. [D-MA-8
02/16/2011 Read twice and referred to the Committee on Banking, Housing, and Urban Affairs. (All Actions) Notes: For further action, see H.R.1905, which became Public Law 112-158 on 8/10/2012. Tracker: This bill has the status IntroducedHere are the steps for Status of Legislation:
03/23/2011 Referred to the Subcommittee on International Monetary Policy and Trade. (All Actions) Notes: For further action, see H.R.1905, which became Public Law 112-158 on 8/10/2012. Tracker: This bill has the status IntroducedHere are the steps for Status of Legislation:
06/10/2014 Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs. (All Actions) Tracker: This bill has the status Passed HouseHere are the steps for Status of Legislation:
06/19/2013 Placed on Senate Legislative Calendar under General Orders. Calendar No. 89. (All Actions) Notes: For further action, see H.R.3204, which became Public Law 113-54 on 11/27/2013. Tracker: This bill has the status IntroducedHere are the steps for Status of Legislation:
08/02/2012 Read twice and referred to the Committee on Homeland Security and Governmental Affairs. (All Actions) Tracker: This bill has the status IntroducedHere are the steps for Status of Legislation:
03/22/2013 Read twice and referred to the Committee on Banking, Housing, and Urban Affairs. (text of measure as introduced: CR S2334-2335) (All Actions) Tracker: This bill has the status IntroducedHere are the steps for Status of Legislation:
THOMAS, 113th Congress Rep. Meadows, Mark [R-NC-11
THOMAS, 113th Congress Rep. Gibson, Christopher P. [R-NY-19
Rep. Bachmann, Michele [R-MN-6
11/19/2013 Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs. (All Actions) Notes: For further action, see S.994, which became Public Law 113-101 on 5/9/2014. Tracker: This bill has the status Passed HouseHere are the steps for Status of Legislation:
THOMAS, 113th Congress Rep. Pascrell, Bill, Jr. [D-NJ-9