Question

1. What information must a notice of privacy policy contain?

2. Be able to identify situations in which each of the following PHI disclosure rules apply: 1. No Authorization Required, 2. No Authorization Required, but Must Give Opportunity to Object, or 3. Authorization Required.

3. What are the categories of covered entities under HIPAA?

4. Describe one of the federal laws that were in place prior to HIPAA that protected health information. Describe the limitations of that law.

5. How far should an individual's right to medical privacy extend?

6. Describe the differences between the designated record set and the legal health record.

7. List the five HIPAA-identified individual rights. For each, explain whether a covered entity must comply with the request

Answer 1

1). Health Insurance Portability and Accountability Act (HIPAA) was passed in 1996, which established several privacy rules and regulations for healthcare professionals about the patient confidentially and transferring their information through electronic records.

The content of the privacy notice include,

• How to use the covered entity, protect, and disclose the health information of the patient
• The rights of an individual regarding how the individual can exercise those rights, and how can a person can complain to the covered entity
• The legal duties’ covered entities with respect to the information included
• The information about the individual, who can be contacted for the further information

As per the Right to Notice of Privacy Practices, the patients have the right access, view and obtain a copy of their personal health information.