![Page 1: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/1.jpg)
HIPAA Privacy TrainingUpdate
Gloucester County Public Schools
![Page 2: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/2.jpg)
What Is HIPAA?
Health Insurance Portability & Accountability Act
Establishes federal rights regarding
Portability and nondiscrimination in health insurance coverage and
Privacy of health insurance information
Covers
Health plans & service providers
Security
Data standardization
![Page 3: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/3.jpg)
What is Protected Health Information (PHI)?
Individually identifiable information such as:Name Employee contribution amountsSSN Date of serviceAddress DiagnosisDate of birth Place of treatmentSex
Regarding past, present or future health care or condition
Maintained or transmitted by the health care plan
![Page 4: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/4.jpg)
Forms of PHI
Paper
Oral
Electronic
Fax
Voice Mail
![Page 5: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/5.jpg)
Examples of PHI
Health enrollment application
Explanation of Benefits (EOB)
Medical bills
Conversations regarding diagnosis or condition
![Page 6: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/6.jpg)
Examples of PHI handled by School Nurses
Pertaining to Employees Blood pressure checks
Medical advice
Pertaining to Students Student records
Electronic Medicaid filing
Must also follow Family Educational Rights and Privacy Act (FERPA) guidelines
![Page 7: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/7.jpg)
Rule of Thumb
Individual sites/departments should not retain PHI (only Office of Human Resources (Craig Smith) and Payroll Specialist overseeing Short Term Disability (Lydia Gilbert) may retain PHI)
All requests for PHI should be directed to Budget & Finance
Treat all health information as it were PRIVATE regardless of whether it is HIPAA protected
![Page 8: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/8.jpg)
What Is Expected Of You?
Safeguard all Health Information
Report Any Privacy Violations to H/R and Budget and Finance
![Page 9: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/9.jpg)
How Should Doctors Notes be Handled ?
Doctors notes should be turned into your supervisor and they will review it, place in a sealed envelope, mark it confidential, and forward it to the Office of Human Resources Attn: Craig Smith.
![Page 10: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/10.jpg)
How Should You Protect PHI ?
Paper form
Transmitted via pony
Seal in an envelope
Clearly designate a recipient
Mark envelope confidential
![Page 11: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/11.jpg)
How Should You Protect PHI ? (cont’d.)
Oral
Speak in a low voice
Close the door
Do not relay information regarding the condition of others without their permission
With employee permission, relay minimal information
![Page 12: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/12.jpg)
How Should You Protect PHI ? (cont’d.)
Electronic Lock your computer screen (CTL/ALT/DEL)
when leaving your work area
E-mail Verify e-mail address
Turn your computer screen so it is not visible to a passerby
Delete e-mail after appropriate action is taken
Use confidentiality notice with all e-mail as follows
![Page 13: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/13.jpg)
How Should You Protect PHI ? (cont’d.)
E-mail (cont’d.)
CONFIDENTIALITY NOTICE: This message, including any attachments, may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you are not the intended recipient (or authorized to act on behalf of the intended recipient) of this message, please do not disclose, forward, distribute, copy, or use this message or its contents. If you have received this communication in error, please notify us immediately by return e-mail and delete the original message from your e-mail system. Thank you.
![Page 14: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/14.jpg)
How Should You Protect PHI ? (cont’d.)
Fax transmission
Use fax machines with restricted access
Shred documents after transmission is verified
Do not leave documents unattended
Use confidentiality notice with faxes as follows
![Page 15: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/15.jpg)
How Should You Protect PHI ? (cont’d.)
Fax transmission (cont’d.)CONFIDENTIALITY NOTICE:The documents accompanying this fax transmission may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you are not the intended recipient (or authorized to act on behalf of the intended recipient) of this message, please do not disclose, forward, distribute, copy, or use this message or its contents. If you have received this communication in error, please notify us immediately by telephone and destroy the original. Thank you.
![Page 16: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/16.jpg)
How Should You Protect PHI ? (cont’d.)
Voice mail
Do not use speaker phone
Delete messages after appropriate action is taken
Do not share your passcode for retrieving messages with others
![Page 17: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/17.jpg)
Notice of Privacy
Gloucester County Public Schools Notice of Privacy covers how we protect employees PHI and provides avenues to report violations.
It is available to all participants of health, dental and flexible benefits plans
Available on the web and in the Budget & Finance Office
Refer any questions to Budget & Finance
![Page 18: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/18.jpg)
Storage of Protected Health Information
Do not retain documents unless necessary
Paper records
Only the Office of Human Resources and Budget & Finance will store documents in locked files
Do not leave in view of others
Electronic
Data should be password protected
Accessed by a limited number of people
![Page 19: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/19.jpg)
Release of Information
Refer requestor to Budget & Finance
Budget & Finance will do the following:
Verify identity of individual requesting information
Provide information on a need to know basis
Divulge minimum information necessary
Err on the side of caution
![Page 20: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/20.jpg)
Releasing Information to Others
Budget & Finance may release information to the following individuals in certain circumstances: Family members
Power of attorney
Legal guardian
Court
Supervisors
![Page 21: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/21.jpg)
Recording Requests for Information
Budget & Finance must: Log requests
Determine if authorization is required from the employee
Examples not requiring authorization from the employee Treatment, payment or health operations
Required by law
Public Safety
National Security
![Page 22: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/22.jpg)
Disposing of Information
Shred paper documents
Delete e-mail
Delete voice mail
Scrub hard drive when computers are removed
![Page 23: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/23.jpg)
Technology Department Responsibilities
Understand what information is protected
Restrict access
Notify privacy official or deputy privacy official of any inappropriate requests
Scrub hard drives of old computers
Develop firewalls and password protection
![Page 24: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/24.jpg)
Privacy Officials
Privacy Official
Superintendent 804-693-1425
Deputy Privacy Officials
Chief Financial Officer 804-693-7811
Executive Director H/R 804-693-7902
Finance Specialist 804-693-7817
![Page 25: HIPAA Privacy Training Update · What is Protected Health Information (PHI)? Individually identifiable information such as: Name Employee contribution amounts SSN Date of service](https://reader033.vdocument.in/reader033/viewer/2022053018/5f1fd06b07858b07d1436801/html5/thumbnails/25.jpg)
Complaints
Privacy Official
Superintendent
U.S. Department of Health & Human Services (written)