HIPAA Patient Privacy Compliance Guide

Table of Contents Photo of Publication Written By Written For AIS Guarantee Shipping Information Related Publications

Order Now (Secure Site) View Cart

Place an order or get more information at 800-521-4323

Price: $467
Format: Annual subscriptions include the looseleaf guide plus quarterly updates, and an accompanying searchable CD.
Pub Code: HIPAA

The HIPAA Patient Privacy Compliance Guide will help you save valuable time and money — and reduce your liability — for years to come.

Protect yourself against potentially devastating fines, penalties, private lawsuits and PR nightmares. Trial lawyers are gearing up to make HIPAA “the next tobacco litigation,” and it only takes one complaint filed with HHS to have investigators knocking on your door.

HIPAA compliance is a permanent thing — not a one-time event in April 2003 — and this publication will keep you up-to-date on the latest requirements and best practices.

Get HIPAA compliance help with practical guidance and how-to tools from many of the nation's top HIPAA lawyers, consultants, and health care managers. (See list of authors in the Table of Contents below.)

The guide —which is updated quarterly with new and revised chapters and case studies — identifies 15 of the most complex and troublesome areas of your HIPAA compliance (see Table of Contents below) and addresses each with easy-to-understand summaries of HIPAA requirements. It's packed with sample forms, notices, waivers, checklists, decision trees, procedures, contract language, timelines, and other practical tools.

Table of Contents

Chapter 1: Getting Organized for Compliance Three organizational structures that can limit compliance chores if you're a "hybrid," affiliated entity or OHCA. How to set up your internal infrastructure. The interplay between internal assessment and attorney-client privilege. Budgeting for compliance ... and much more. Written by Michael Bell, Esq., Mintz Levin Cohn Ferris Glovsky and Popeo, Wash., DC.

Chapter 2: Preemption of State Law HIPAA's dual preemption scheme. General rules and exceptions. Preemption methodology. Requests for exceptions. Conducting a preemption analysis.Written by Cynthia F. Reaves, Esq., Linda S. Ross, Esq., and Michael J. Friedman, Esq. Honigman Miller Schwartz and Cohn LLP, Detroit

Chapter 3: Gap Analysis and Project Planning Exhaustive coverage of the HIPAA gap analysis and baseline assessments. Describes the details of a well-organized compliance system that flows from an effective gap analysis, including project planning, implementation, testing, auditing and monitoring. Written by Christopher E. Coleman, MPH, Vice President, and Kristy L. Kuhn, MPA, Associate Consultant, Strategic Management Systems, Alexandria, VA.

Chapter 4: Completing a Risk Assessment Basic concepts of risk management. Risk management and HIPAA stakeholders. Steps toward managing HIPAA risks. Risk management and the gap analysis. Developing a HIPAA Risk Response Worksheet. Includes useful risk management templates and a discussion of best practices. Written by Cornelia M. Dorfschmid, Ph.D., Senior Vice President & CIO, Strategic Management Systems, Inc., Alexandria, VA.

Chapter 5: Patients' Rights Featuring the notice of privacy practices, complaint procedures, log of disclosures, and practical information on the full range of rights available to patients under HIPAA. Written by Brian Gradle, Esq., Hogan & Hartson LLP, Wash., DC.

Chapter 6: Use and Disclosure of Protected Health Information (PHI) What is "minimum necessary"? Who "needs" PHI? When to obtain optional consents. Sample forms for consents and authorizations. How to de-identify information. Special rules for psychotherapy notes ... and much more. Written by Brian Gradle, Esq., Hogan & Hartson LLP, Wash., DC.

Chapter 7: PHI and Research How to tell "research" from "treatment." Authorizations for PHI created for research that includes treatment. Waiver of authorizations for research that doesn't include treatment, and the role of IRBs and privacy boards. Using PHI for activity preparatory to research ... and much more. Written by Diane M.L. Lee, Esq., Davis Wright Tremaine, San Francisco.

Chapter 8: Safeguarding PHI The DOs and DON'Ts for handling PHI as it is collected, moved, shared, stored or destroyed ... whether it is contained in printed information, facsimiles, telephone calls, conversations, e-mail, computers, or computer networks. Written by Tim Barker, Clinical Applications Analyst, Upstate Medical University, Syracuse.

Chapter 9: Business Associates Examples of relationships that are — and are not — business associates, and those that fall into gray areas. Important exceptions. Oversight and due diligence of business associates. "Chain of trust," "trading partner" and "reciprocal" agreements. Placeholder provisions. Includes drafting tips, sample contract language, a model agreement, and much more. Written by Reece Hirsch, Esq., Partner, Davis Wright Tremaine, San Francisco.

Chapter 10: Employee Education and Training A wealth of information in one of the most important areas to effective HIPAA compliance. Topics you should cover in your training. How to conduct your programs. Recommended versus required training. Contains lots of practical help, including detailed "scenarios" you can use in your training programs. Written by Geralyn Kidera, JD, Vice President, and Mark Pastin, Ph.D., President, Council of Ethical Organizations, Alexandria, VA.

Chapter 11: Data Security Requirements Easy-to-understand explanations of privacy vs. security, access control (internal and external), physical security, procedural security, and other important HIPAA IS considerations. Written by Richard Friedland, Friedland Management Solutions, Inc., Morrison, CO.

Chapter 12: Marketing and Fundraising Featuring highly targeted discussions of what is "marketing," "treatment," "payment," "health care operations," and other key concepts. Marketing and business associates. Coverage of HIPAA's impact on fundraising and disease management. Packed with detailed examples that make complex HIPAA concepts easy to understand. Written by Eric Tower, Esq., Mintz Levin Cohn Ferris Glovsky and Popeo, Wash., DC.

Chapter 13: Data Security Audits Developing and implementing an effective audit program. Transforming audit criteria into measurable results. Program management and internal vs. external auditing. Includes an audit checklist, template for a data security risk assessment, sample data security policy, and much more. Written by Chris Apgar, Data Security and HIPAA Compliance Officer, Providence Health Plan, Beaverton, OR.

Chapter 14: Privacy Audits Effective methods for auditing your organization's ongoing compliance with the full range of HIPAA privacy requirements. Includes innovative ways to monitor compliance, how to make sense of the results, and an implementation checklist and other valuable tools and flow charts. Written by Christine Jensen, HIPAA Project Manager, Denver Health, Denver.

Chapter 15: Recordkeeping and Reporting Required vs. recommended recordkeeping. How-to document your compliance fully. The form and retention period of records required. Records for privacy staff, education and training, and PHI policies. Notices, consents and authorizations. Access to PHI by individuals. Amending records with PHI. Reporting requirements regarding individuals, business associates and work force members. Written by Donald E. Koenig, Jr., Esq., Corporate Director, Corporate Responsibility Program, Catholic Healthcare Partners, Cincinnati.

60 Policies and Procedures (P&Ps) By
Strategic Management Systems, Inc.*

The Guide has been enhanced with the inclusion of 60 detailed HIPAA policies, procedures and forms developed by the Alexandria, VA, consulting firm of Strategic Management Systems, Inc., which has a strong track record of providing valuable management strategies in the field of health care compliance. Led by former HHS IG Richard Kusserow, SMSInc consultants have developed a number of highly sophisticated tools to achieve compliance with HIPAA and other federal laws.

• 10 Administrative Requirements P&Ps
Filing complaints, prohibiting retaliation, maintaining documentation, employee training, and more.
• 11 Individual Rights P&Ps
Accepting and denying requests for amendments, accounting, granting and denying access to PHI, confidential communications with health plans and providers, and more.
• 10 Consent and Authorization P&Ps
PHI for research, initiative by the individual, for the entity's own use, revocation, obtaining consent, and more.
• 6 Use and Disclosure (General PHI) P&Ps
Assurances from business associates, de-identifying information, minimum necessary, treating representatives, verifying entities, and more.
• 11 Use and Disclosure (Specific) P&Ps
Psychotherapy, fundraising, marketing, 4 notices of privacy practices, facility directories, and more.
• 12 Use and Disclosure (Authorization Not Required) P&Ps
Decedent, victims of abuse or neglect, required by law, for public health, for Workers' Compensation, and more.
• 10 Forms
Consent, joint consent, authorization, amendment request, business associate, notice of privacy practices, and more.

 

Written By

See table of contents for authors.

 

Written For

Privacy officers, compliance officers, medical records directors, CEOs, CFOs and other top managers at:
• Hospitals
• Billing companies
• Managed care and insurance companies
• Medical group practices
• Ancillary provider groups
• Pharmaceutical companies
• E-health companies

 

Shipping Information

This item is shipped via UPS. Please give us your street address when you order (UPS does not deliver to PO boxes). You should receive your order within 5-7 business days. Shipping cost is $5 per item.

Rush orders: Please call us at 800-521-4323 to place a rush order. We will overnight your order for an additional charge of $30, or you can give us your FedEx or UPS account number and we will charge the shipping to your account. Rush orders placed after 3:00pm EST will not be shipped out until the next business day.

 

Related Publications

Report on Patient Privacy
Report on Medicare Compliance
A Guide to Auditing and Monitoring HIPAA Privacy Compliance

For further information call 800-521-4323 or e-mail customerserv@aispub.com