|
The American Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a set of rules to be followed by health plans, doctors, hospitals and other health care providers. One key provision requires health plans and providers to use standard formats for electronic data interchange, such as electronic claims submission EDI.
The HIPAA Privacy Rule took effect on April 14, 2003. Key privacy provisions include:
- Patients must be able to access their record and correct errors
- Patients must be informed of how their personal information will be used.
- Patient information can only be shared if needed to treat the patient. In particular, it cannot be used for marketing purposes without their explicit consent.
- Patients can ask their health plans and providers to take reasonable steps to ensure that their communications with the patient are confidential. For instance, a patient can ask to be called on his work number, instead of home or cell phone number.
- Patients can file formal privacy-related complaints to the HHS' Office for Civil Rights.
- Health plans or providers must document their privacy procedures, but they have discretion on what to include in their privacy procedure.
- Health plans or providers must designate a privacy officer and train their employees.
Legislative Information
- House: 104 H.R. 3103, H. Rept. 104-469, Pt. 1, H. Rept. 104-736
- Senate: 104 S. 1028, 104 S. 1698, S. Rept. 104-156
- Law: Pub. L. 104-191, 110 Stat. 1936
- HHS Privacy Rule: 45 CFR 160, 45 CFR 164
External links
|
