How to Train for HIPPA Privacy

Federal law protects your right of privacy in confidential medical records. The Health Insurance Portability and Accountability Act (HIPAA) requires hospitals and insurers to provide ongoing and periodic training concerning the privacy of a patient's health information within the law.

HIPAA's Privacy Rule

Section 164.530 of HIPPA sets forth its Privacy Rule. The Act outlines the training that covered entities must provide to ensure a patient's protected health information (PHI) and confidentiality are not compromised. There is a privacy right to guard against unauthorized disclosures. There is a similar right to grant access when desired.

HIPPA's Training Requirements

The entire workforce of a hospital or insurance company must receive training on the policies and procedures regarding PHI. This standard training ensures the workforce is aware of the entity's policies and procedures on handling protected health information. Ongoing training is also required. New employees must receive training within a reasonable time of starting a position. Periodic meetings to remind the workforce of HIPPA's privacy rule are also required. Compliance must be documented. Each employee must certify receipt of training.

HIPPA Penalties

The Office of Civil Rights (OCR) enforces privacy violations. As of 2010, a $1,000 penalty is imposed fore each violation. The OCR handled 7,515 complaints in 2009 and 8,701 complaints in 2008. The most prevalent complaint was impermissible use and disclosure of a person's medical records.

References

• U.S. Department of Health and Human Services: Health Information Privacy
• HIPPAps Privacy and Security: The Importance of Privacy
• HRcertification.com: HIPAA Security Training
• HealthcareTraining Center.com: Training and Education for Healthcare Professionals