HIPPA Training for EMS Personnel

HIPPA Training for EMS Personnel

HIPAA Training for EMS Personnel Outline What is HIPAA Components of HIPAA Examples Review What is HIPAA? HIPAA stands for the Health Insurance

Portability and Accountability Act of 1996 Passed in the early 1990s to regulate questionable policies and practices of health maintenance organizations Created privacy practice standards that the healthcare worker must follow Until now, virtually no federal rules existed to

protect the privacy of health information and guarantee access to such information. This final rule establishes, for the first time, a set of basic national privacy standards and fair information practices that provides all Americans with a basic level of protection and peace of mind that is essential to their final participation in their care. -Preamble to December 2002 Privacy Rule Why is it needed?

Provides patients with legal rights and voices in how healthcare groups/companies use the protected health information (PHI) Other areas of HIPAA include security requirements for computer storage and transmission of healthcare data along with insurance claim "transaction requirements Who Must Comply ?

Healthcare providers that charge for services including EMS agencies, Fire Departments, Vol. Rescue Squads & all personnel who work or volunteer for such groups/agencies Companies & individuals acting on behalf of such groups/agencies, more commonly called Business Associates How does it Impact EMS?

Regulations affect how EMS personnel use & transfer pt. information Requires EMS agencies to appoint a Compliance Officer & create SOPs for the members to follow HIPAA mandates training of EMS personnel and administrative support staff

How does it Impact EMS? EMS agencies and personnel must follow HIPAA regulations during pt. care situations, when transporting pt. information and for administrative function EMS agencies must follow HIPAA rules in retaining, managing & releasing patient information/records

How does it Impact EMS? EMS agencies must abide by HIPAA regulations by notifying patients of their rights in a timely manner EMS agencies must also request that each patient sign a statement acknowledging that he/she is aware of these rights Violation of HIPAA

Civil penalties for violation of HIPAA regulation include fines acted without knowing what you were doing was wrong Criminal penalties can include fines and jail knowing what you were doing is wrong and tried to get profit from it Enforcement targets the healthcare provider

and agency Components of HIPAA Using PHI (Definitions) Protecting PHI PHI can be defined as any medical information concerning a patient identification; Name ID number

Or any means of identification Using PHI Because EMS agencies operate in a field setting, HIPAA uses standards of reasonableness to address privacy & PHI Generally, patient privacy and PHI become an issue in a prehospital setting when loading a patient and access is not controlled

Using PHI Personnel need to focus on information request going out, not coming in, and who is making the request Generally, other public safety agencies that do not charge for services are not covered by HIPAA. These include 911 centers, Fire Departments and Law Enforcements

Using PHI Basic Rules PHI may only be shared for treatment, payment or operational needs EMS of agencies. Other requests require written consent from patient A minimum necessary information requirement is standard for all use of PHI

outside of treatment PHI Basic Rules Treatment includes sharing PHI between; First Responders EMS personnel ER staff Pharmacies and other in kind parties By Voice, Paper Electronic/telecommunication means

EMS agencies, Billing companies, guarantors PHI Basic Rules Healthcare Operations included in sharing of PHI; EMS personnel Supervisors QA/QI Medical Control Physician

Administrative personnel Training Case reviews CISD meetings PHI Basic Rules If PHI needs to be shared with other public safety groups, Gov. agencies or other officials in operational settings such requests: Must be directly related to a justifiable need

as permitted by HIPAA regulations PHI Basic Rules Valid request for PHI include; Mandated Requirements of Law Public Health Activities Abuse/Domestic Situations Health Oversight Activities Judicial & Administrative Law Enforcement Activities

Valid request for PHI (cont.) Deceased Patients Tissue Donation Patients Research Purposes Threat to Public Safety Specialized Government Functions Workers Compensation Valid request for PHI (cont.) Law Enforcement

Process/Covered by Law Identification and Location Victims of Crime Deceased Patients Crime on Premises Reporting Crime Valid request for PHI (cont.) Generally, valid requests for PHI from other public safety agencies may be granted

keeping the best interest of the patient in mind In many cases, EMS personnel must use professional judgment in granting such PHI request PHI must remain confidential for all other requests unless prior written authorization has been obtained from the patient. It cannot be released without written Using PHI Family & Friends

One exception is information request from family, friends or other individuals involved in care or payment arrangements for the patient EMS personnel can grant limited requests with the approval of the patient or by using professional judgment when the patient is incapacitated

Using PHI 4 Step Decision Method 1. Is information coming in or going out? 2. Who is making the PHI request & what is the reason? 3. Does it meet treatment, payment or operational requirements? 4. If not, is the reason valid and appropriate? Using PHI NPP Notification Process Notice of privacy practices (NPP) including

patient rights must be provided to each patient at the time of service or as soon as possible after said encounter HIPAA regulations give patients specific rights concerning PHI and how it is used Managing PHI - Records Physical Safeguards Limited access

E-PCRs must meet HIPAA security for electronic PHI Passwords, identification and protocols Request for PHI (administrative approval) Dedicated Fax line E-mailing of PHI (PHI security standards) Made in writing More information Google 2006 45 CFR 164.500

Case Scenarios Pt. walking across intersection is hit by car at 55 MPH. The vehicle was involved in MVA just prior to striking the pt. EMS, Fire, Police & SPD all have responded Pt has multiple injuries, is unresponsive, open Fx both legs, with lots of bleeding and vitals are deteriorating Case Scenario

Fire & Police on scene first Fire starts treating pt. in front of many bystanders that were helping the victim Did a HIPAA violation occur? Scenario No First responders need to treat pt. in the environment found, no reasonable measures could be taken to assure privacy

Ambulance arrives, crew goes to pt. The first responder gives a detailed report to the crew in front of bystanders and Police. Did HIPAA violation occur? Examples NO First responders need to give report to the crew The crew loads the pt into the ambulance and

starts treating pt. A few minutes later a firefighter brings a priest over that says he know the pt. The priest ask about pt condition and ask if the pt is going to die? Is this a HIPAA issue? Example YES The information request means PHI would be given out. The relationship between pt and

priest would have to be verified. Proceed with caution, minimum necessary information requirement in place A few minutes later a Police officer brings an obviously upset woman to the rig who states that is her son and ask will he live and what is his condition? Is this a HIPAA issue? Example

Yes -The information request means PHI would be given OUT. The Police say yes this is his mother, proceed with caution again in what information you share You leave the scene with pt. You give a radio report to MC with PHI exchange. Is this a HIPAA issue? Example No & Yes PHI is given out, generally pt ID is

not given over radio. If that is needed or requested via MC use a cell phone You arrive at Hospital and you transfer care over to them. While writing your PCR a crew member from another department states WOW that was a bad one, huh? Did a HIPAA violation occur? Example

Yes Only crew members directly involved with the call, supervisors or other administrative personnel should be reading PCRs. Police officers on the scene and at the hospital requested certain information including pt identity and condition. They are requesting this information as part of a potential fatality investigation Is it a HIPAA violation to provide this

information? Example NO LEA Issues In this case of a potentially fatal MVC, providing the Police with certain information for the investigation is appropriate. This is limited minimum necessary information requirement. Several weeks later you are contacted by

patients attorney, who wants to talk with you about the incident and pt injuries. Is it a HIPAA violation to speak with this individual? Example Possibly Confirm ID and make sure he has authorization as the pt. representative. This is better handled with a subpoena for deposition or trial.

Review Understand the concept of PHI and the rules Know when minimum necessary requirements should be used Respect the Privacy of the Patient Act in the Best interest of Patients

Recently Viewed Presentations

  • Aztecs Welcome to the Aztecs

    Aztecs Welcome to the Aztecs

    THE AZTECS * * * * * S* Teacher's notes: The Aztecs created more useable land by filling in marshlands and swamps. They created even more by building dikes to hold back the water.
  • Complex interventions  Evaluating Evaluating them & synthesising evidence

    Complex interventions Evaluating Evaluating them & synthesising evidence

    Five barriers to public health intervention research Unpopular with researchers (often involves collecting new, representative data in "difficult to access" communities) Methodologically difficult (you don't control the intervention; it never happens on time; knock-on effects on funding; difficulty of finding...
  • Unit 7: Sociological Perspectives - WordPress.com

    Unit 7: Sociological Perspectives - WordPress.com

    In groups create a presentation discussing the 7 different sociological perspectives in relation to patterns and trends of health and illness in one social group! For M2 you will need to discuss . two. social groups; SOCIAL CLASS & AGE....
  • Sensation and Perception - Ms. Brunink's Courses

    Sensation and Perception - Ms. Brunink's Courses

    Figure 4.8The spectrum of electromagnetic energy This spectrum ranges from gamma rays as short as the diameter of an atom to radio waves over a mile long. The narrow band of wavelengths visible to the human eye (shown enlarged) extends...
  • weifangfayubu.weebly.com

    weifangfayubu.weebly.com

    L'âge d'or : la seconde moitié du 16ème siècle Une nouvelle esthétique Le français gagne du terrain 1530 : l'Humanisme devient français Erudits parlent en latin Correspondent en latin Montaigne 1539 : Ordonnance royale Le français devient la langue administrative...
  • Aquatic Biodiversity Chapter 8 Red Tide Core Case

    Aquatic Biodiversity Chapter 8 Red Tide Core Case

    Saltwater and freshwater aquatic life zones cover almost three-fourths of the earth's surface with oceans dominating the planet. Concept 8-1B. The key factors determining biodiversity in aquatic systems are temperature, dissolved oxygen content, availability of food and availability of light...
  • Weather Radios could save your life!  Weather radios

    Weather Radios could save your life! Weather radios

    Burning Safely. Never burn if a burn ban has been issued! First violation of a burn ban is a class B misdemeanor: up to 30 days in jail and a $1,500 fine. Never leave a fire unattended, and never leave...
  • Fingerprint Lab Fingerprints  Fingerprints are an impression of

    Fingerprint Lab Fingerprints Fingerprints are an impression of

    Fingerprints. Investigators dust latent fingerprints with a fine powder to make the patterns visible and then lift the fingerprints with sticky paper. Fingerprints are permanent details that are created before you are born. No two fingerprints are the same, not...