About AHI
ResourcesResources > HIPAA Info
A list of frequently asked questions about HIPAA are available on this page, please feel free to contact Azalea Health Innovations, Inc. for consultation or questions that you may have about HIPAA.
You can also visit the U.S. Department of Health & Human Services for more information about HIPAA policies and regulations.
http://www.hhs.gov/hipaafaq/
Who must comply with HIPAA?
As required, the final regulation covers health plans, health care clearinghouses, and those health care providers that conduct financial and administrative transactions electronically. Those that are not doing electronic transactions are still mandated to comply with the Privacy and Security rules.
When is the deadline for compliance?
Please visit the following link for a list of HIPAA Compliance dates: http://www.hipaacomply.com/timeline.htm
What kind of information is protected?
All medical records and other individually identifiable health information used or disclosed by a covered entity in any form, whether electronically, on paper, or orally, are covered by the final rule.
What measures must be taken to protect information?
The Privacy Rule generally requires covered entities to take reasonable steps to limit the use, disclosure of, and requests for Protected Health Information to the minimum necessary to accomplish the intended purpose.
Who enforces HIPAA?
The Department of Health and Human Services will be responsible for determining if institutions are HIPAA-compliant as well as for assessing penalties and fines for violations.
We work very closely with other specialists and need to fax patient information to them. Is this allowed?
Every fax needs to have a confidentiality statement saying that protected health information is enclosed, and should request that if the person receiving the fax is not the designated person, they should send the fax back to you.
An example of this can be:
"The information contained in this facsimile is privileged and confidential and intended for the review and use of the specific addressee listed above. Federal regulation (42 CFR, part 2) prohibits you from making any further disclosure of it except as permitted by law or without the further specific written consent of the person to whom it pertains.
If you are not the intended recipient nor the employee/agent for delivering this information to the intended recipient, you are hereby notified that any disclosure, copying, distribution or taking of any action of this telecopied information is strictly prohibited.
If you have received this fax copy in error, please notify us by the telephone number listed above to arrange the return/destruction of the documents. Thank you."
If you are not the intended recipient nor the employee/agent for delivering this information to the intended recipient, you are hereby notified that any disclosure, copying, distribution or taking of any action of this telecopied information is strictly prohibited.
If you have received this fax copy in error, please notify us by the telephone number listed above to arrange the return/destruction of the documents. Thank you."
Are we allowed to send recall cards?
Absolutely! Just show the date, time of the appointment, and premedication information. Never be specific as to what the medication is or what the procedure is for that day. If you need to mention anything that's considered confidential, mail the card in an envelope.
Are we allowed to call out a patients name in the reception room?
Yes, as long as you don't mention why the patient is there.
We have plastic holders outside each of our operatories. Are we allowed to keep patient folders there?
Yes, as long as other patients cannot see any personal information. And as long as patients don't have free access to the area where these may be displayed.
What is allowed on the outside of a patients chart?
You should have as little information as possible on the outside.
Are sign-in sheets allowed?
Yes, as long as the only information shown is the patient name.
When calling to confirm a patients appointment, can staff leave a message on his or her answering machine?
Yes, unless the patient specifically asks you not to leave messages. The same policy should be followed with regards to leaving a reminder with a family member. You may only mention the day and time of the appointment.
Please call us if you have any questions about the HIPAA guidelines and your medical practice. For a free HIPAA consultation, please Contact Us.