HIPAA

Frequently Asked HIPAA Questions Notice of Privacy Practices (38k PDF) Privacy Complaint Form (28k PDF)

HIPAA is the Health Insurance Portability and Accountability Act. This act includes the HIPAA Privacy Rule created to establish national standards to protect individuals' medical records and other protected health information (PHI).

Those required to comply with these new privacy standards set by Congress include health plans, healthcare clearinghouses and healthcare providers, such as BAPTIST HEALTH, who conduct certain financial and administrative transactions electronically. These entities (collectively called "covered entities") are bound by the new privacy standards even if they contract with others (called "business associates") to perform some of their essential functions.

These new regulations require the average provider like BAPTIST HEALTH to:

1. Provide information to patients about their privacy rights and how their information can be used.
2. Adopt clear privacy procedures for its practice or hospital.
3. Train employees so that they understand the privacy policies and procedures.
4. Designate a Privacy Officer to be responsible for seeing that the privacy policies and procedures are adopted and followed.
5. Secure patient records containing PHI so that the records are not readily available to those who do not need them.

Most covered entities have until April 14, 2003, to come into compliance with these standards. The Office of Civil Rights will enforce these new rules.

HIPAA PRIVACY STANDARDS AND THE PATIENT

In regards to PHI maintained by BAPTIST HEALTH, patients have the right to:

· Request to inspect and copy their medical record
· Request to amend their medical record
· Request limitations on information disclosed
· Choose the means of confidential communication
· Receive copies of the Notice of Privacy Practices
· Request an accounting of "non-routine" disclosures of PHI

The Privacy Rule also allows family members the right to see other family member's record if they have been designated as the patient's personal representative or if the patient gives authorization.

For additional information or questions, please contact Kathy Roberts, Privacy Officer, at 501-202-1323.