1. Data Privacy HIPAA Training

2. Progress Diagram Implementation Orientation Evaluation Training Function in accordance Apply yourknowledge Learn the Basics Receive further Training

3. Agenda 1. HIPAA-Definitions 2. Potential Departments Impacted 3. Questions to Determine Impact 4. Types of Information Protected 5. How To’s 6. Don’ts 7. HIPAA-Flow Chart

4. Definitions • HIPAA • Health Insurance Portability and Accountability Act of 1996 • Designed to Protect Privacy of Patient Information by securing electronic and physical medical information. • Theory- • ”A student’s rights and welfare must not be sacrificed for scientific or medical progress”.

5. Definitions (Continued) • Protected Health Information (PHI)-IIHI created, or received, by a covered entity related to past, present, or future, physical or mental health of an student. • Standard Transactions-coordination of benefits, health care claims, health care payments, enrollment or disenrollment in health plan, eligibility for a health plan, first report of injury, health plan premium payments, referral certification and authorization, health claims attachments and others as prescribed by DHHS secretary.

6. Potential Areas Impacted Does your department need Evaluation? Dept of Counseling Professions Counseling Services Health and Human Performance Human Resources International Students Office Child Care Center PHI-In need of Evaluation? Human Behavior and Diversity ? Health Services Athletics

7. Does this Impact my Department? • Three Questions to Ask • 1. Are we dealing with IIHI? • 2. Do we perform one of the standard transactions? • 3. Do we transmit information electronically?

8. Types of Info protected • Name • Social Security Number • Lab Results • Diagnosis • Treatment • Date of Birth • Telephone Number • Email address • Account Numbers • IP addresses • Any unique identifying information • Medical Record Number • Counseling Use • Location of Treatment • Medications • Referrals • Other Info commonly found in health care records

9. How To’s • 1. FERPA first • 2. Hybrid Entity

10. How To’s (continued) • 3. Authorization for Release of Information • “Core elements” • Permission to disclose without release

11. How To’s (continued) • 4. Encryption-http://www.cs.virginia.edu/papers/01300271.pdf • 5. Research and HIPAA- http://privacyruleandresearch.nih.gov/authorization.asp

12. Don’ts • Release Medical information to outside employer • Don’t release information that can be used for marketing or advertising purposes • Release information related to mental health counseling sessions or physical health without proper authorization • Send IIHI electronically without proper encryption technology

13. HIPAA Flow Chart Orientation Evaluation Training Implementation Awareness and Education Request for further Training Identify Risk Planning And Further Assessment

14. THE END