Center for Career Training

A proven leader in medical career training.

HIPAA Rule

Health Insurance Portability and Accountability Act (HIPAA)

Passed 1996 Privacy regulations became

Became effective in 2000 enforceable 4/14/2003

The HIPAA Rule applies to all departments, staff, students, volunteers and anyone authorized to share health
information or enter information into the medical record.

The rule provides facilities, physicians and patients with ways to protect patient privacy. The rule rules are beneficial to
patients because they strengthen and put in place standards that are recognized nationwide to provide for the privacy
of medical information. Under this rule, patients must be informed regarding how their protected health information
(PHI) may be used. Patients may object or restrict the use or release of that information. Information regarding how
facilities use and disclose patient information must be made available to patients. Facilities may have an appointed
Privacy Officer to whom questions and complaints may be addressed. You may also register a complaint with the
Secretary of the Department of Health and Human Services if you believe your privacy rights have been violated.
Complaints must be submitted in writing.

If state law is more stringent in the disclosure and use of PHI, state law will prevail. Breach of the new rules may
result in civil or criminal action penalties. Some examples follow.

Patients may choose not to be listed in a hospital’s patient directory. Disclosure of their presence is a breach
of the rule.
Computers: Never leave the computer area with the screen on. Computers should be turned off. Access
codes should be secured and not shared with others.
Know the HIPAA and your state law.
Do not gossip.
Do not share information in public areas, i.e., lunch rooms, hallways, etc.
Access to medical record information in general requires patient authorization.
Taking photos of a patient is an invasion of privacy.
Provide a code number for family or friends who are authorized by the patient to receive PHI via phone to
identify caller. Caller must provide the code number in order to receive information.
Never share PHI when inquiries are made by unauthorized individuals, i.e., other patients, friends and
neighbors.
Never share information regarding your patient with anyone else except those who also provide care for that
patient.
In some states sharing information regarding the pregnancy, rape or sexual abuse of a minor may be a
breach of the law.
Revealing the identification of, presence or absence of a patient now or ever in a psychiatric or substance
abuse program is a violation of federal law.

We are still obligated to report certain facts to the proper authorities including threats to any person, suspicions of
abuse, wounds (gun shot and stab wounds), deaths of uncertain nature, and communicable diseases.

We must share PHI as required by law, i.e., court order.

In summary, never share medical information unless you know without a doubt that it is authorized. A breach of the
rule may result in civil or criminal penalties for you and your employer. Think before you speak!!

3915 West Oakland Park Boulevard  Lauderdale Lakes, Florida  33319  Phone: 954.731.7475