[MUSIC] Hello, I'm Adler Archer, and today we will be discussing HIPAA. During this presentation we will discuss the Act, that was created by Congress called HIPAA, we'll discuss the privacy and security rule within that Act. We'll discuss what HIPPA means for patients, what HIPAA means for you, and cover an example of a HIPAA violation. So what is HIPAA? HIPAA stands for Health Insurance Portability and Accountability Act. And the purpose of HIPAA, is to provide standards and requirements for the privacy and security of protected health information. The Act was created in 1996 and updated in 2009 by the HITECH Act. First part of HIPAA is Privacy Rule, privacy rule requires that covered entities create processes and procedures to help ensure that protected health information is kept confidential. Covered entities include, doctors offices, health clinic houses, and health care organizations, business associates are also covered under the privacy rule. Business associates would include, accounting firms, data storage companies, pretty much any organization that's doing work for the covered entity that is going to have access to PHI. Security Rule, so the security rule sets up a few standards around safeguards, to help make sure that information is kept secure. So the first is administrative safeguards, so this is generally going to be policies and training programs for people who come on board, creating a security management plan, hiring security personnel to help run these programs. Technical safeguards, would include things like auditing data and different types of transmission, verification's to make sure that things that are being sent out are meant to be sent out, and things that are not supposed to be sent out are not being sent out. And the physical safeguards would include things like controlling who has access to the building, and workstation security, so different types of ways to secure computers and other devices. So what does HIPAA mean for patients? So mostly what HIPPA says is that, patients can review their own data, they can control who has access to their data, and then they could make corrections if they look at something in their health record, that seems a bit off. What does it mean for you? So your role is vital in helping ensure that the protected health information for patients is kept secure and confidential, if you have any questions, always err on the side of caution. Never discuss this protected health information with friends or family, definitely don't post it on social media, also don't discuss in public areas where other people might over hear what you're talking about. So let's discuss an example of a HIPAA violation, so imagine your coworker had patient information on their work computer, but there is no password on the computer, and they just took it out unsecured. So they live in their car overnight, there's no one watching it, there's no physical safeguard other than just being in the car and someone breaks in and steals that computer. Well, now they've got access to all that patient data, and so hospitals around the country are being fined for these types of mistakes, because there wasn't a physical safeguard in place and the data therefore it wasn't kept secure. Is it true or false? While doctors must follow HIPAA rules, insurance companies are not responsible because they don't provide care. If you answered false, you are correct, insurance companies are required to comply with HIPAA, because they have access to, and they store PHI. So today we've discussed the 1996 Act that was created, called HIPAA, we've talked about the privacy rule, the security rule, what HIPAA means for patients, what it means for you, and we covered a violation example. Thank you for watching this presentation. [MUSIC]