Flashcards
ER Express Compliance Study Kit
Cards in this deck (21)
- 1What does PHI stand for?PHI is "Protected Health Information"
- 2What does PII stand for?PII is "Personally Identifiable Information"
- 3Who is ER Express' Security Officer?ER Express' Security Officer is our CEO, Sahil Patel
- 4Which methods are approved for sending data with PHI?The best way to share PHI data is for clients to download it themselves from our software application.
Secure File Transfer (SFTPS) is also approved. - 5Is it OK to use slack to share PHI data?No. Slack is not secure!
- 6In order to answer a help ticket in Zendesk, I need to use a screenshot with PHI. Is that ok?No, it is not. Zendesk is not approved for sharing PHI.
- 7Can I send PHI data on email? What if i put 'confidential' in the email subject heading?It is never OK to send PHI via email. You CAN send aggregate statistics.
- 8Do all ER Express' staff have to abide by our compliance policies and procedures? Even part-time or contractors?All ER Express' staff have to abide by our compliance policies and procedures, including interns, contractors (Mindspan, Sparity), and part-time (nurse trainers, interns)
- 9What document typically governs our compliance responsibilities to our clients?The Business Associate Agreement ("BAA") governs most of our compliance responsibilities with customers and with partners.
- 10What is a covered entity?Covered entities are defined in the HIPAA rules as (1) health plans, (2) health care clearinghouses, and (3) health care providers who electronically transmit any health information
- 11What is a Business Associate?A person or entity who, on behalf of a covered entity, performs or assists in performance of a function or activity involving the use or disclosure of individually identifiable health information
- 12What is a data breach?A data breach is the intentional or unintentional release of secure or private/confidential information to an untrusted environment.
- 13If I share PHI by accident, would it still be considered a breach?Generally, yes. In fact, most breaches are the result of accidental sharing.
- 14How should I handle media inquiries?1. State that you cannot comment on it at all
2. Refer them to ER Express' Security Officer - 15What is a security incident? Is it the same as a breach?A security incident is not necessarily a breach because even an attempt to access unauthorized data is a security incident.
The HIPAA Security Rule (45 CFR 164.304) describes a security incident as “an attempted or successful unauthorized access, use, disclosure, modification, or destruction of information or interference with system operations in an information system.” - 16I think ER Express has a security incident and / or a data breach. What should I do?Call ER Express' Security Officer.
Do NOT email, slack, text. - 17What does HIPAA stand for??HIPAA is the acronym for the Health Insurance Portability and Accountability Act that was passed by Congress in 1996
- 18What does HIPAA contain? Why does it impact ER Express?HIPAA has three major sections: allows families to get coverage when they change / lose jobs; address fraud / abuse; mandate standards for data and billing; require protection of PHI. This last part means we have to handle patient data in a confidential manner.
- 19What does HITECH stand for?Health Information Technology for Economic and Clinical Health, signed into law Feb 2009
- 20What does the HITECH Act do? How does it impact ER Express?HITECH does three big things: 1) Encourage EHR adoption through the Meaningful Use incenttives and penalties 2) Expand data breach notification 3) Expand electronic PHI protection. It requires ER Express comply with ePHI and report PHI breaches.
- 21Is ER Express a Business Associate or a Covered Entity?ER Express' clients - the hospitals and clinics using our software - are Covered Entities.
ER Express is a Business Associate to those Covered Entities.
Information
- Description
- Compliance Flashcards on ER Express Compliance Study Kit, created by Sahil Patel on 06/10/2018.
- Created by
- Sahil Patel · Oct 2018
- Updated
- Oct 6, 2018
- Views
- 81
- Rating