NOT ELIGIBLE FOR PREMIUM CREDIT

This course is intended for HIPAA Officers/Coordinators. This course will cover the Health Information Technology for Economic and Clinical Health Act of 2009, better known as the HITECH Act, incentivized using electronic health records and expanded HIPAA regulations.  One such expansion was the creation of the breach notification rule.  This rule requires covered entities and business associates to notify patients when breaches of their protected health information, or PHI, occur.  Under the HIPAA Breach Notification Rule, a breach is defined as “an impermissible acquisition, access, use or disclosure under the Privacy Rule that compromises the security or privacy of the protected health information… unless the covered entity or business associate demonstrates that there is a low probability that the protected health information has been compromised.”

Learning Objectives are: 

1. Define what constitutes a breach under the HIPAA Breach Notification Rule.
2. Recognize the three exceptions to the breach notification rule.
3. Describe the factors to consider when assessing the risk of a breach.
4. Outline the steps for notifying affected individuals and the Secretary of Health and Human Services (HHS).

IMPORTANT:

As you begin to develop your practice’s HIPAA Program, it is important to remember it must be customized to your practice’s unique needs and site-specific information. The SVMIC HIPAA Compliance Manual’s policies and procedures are designed to serve as a template for what the practice should be doing.