HIPAA Privacy rules became effective on April 14, 2003. Before we discuss the actions you should have already taken or will need to take, some definitions of terms will be helpful.

Definitions

• Privacy standards: A system for keeping medical records confidential.
• PHI: Protected Health Information – Link to patient identifiers.

In order to be protected health information, the following criteria must be met.

1. Information must be created, received, or maintained by a healthcare provider or other HIPAA “covered entity”; and
2. Information must relate to past, present or future physical or mental health or condition of an individual or to the provision of healthcare to an individual;
   OR
3. Information must relate to payment claimed or paid for past, present or future diagnosis or treatment of a physical or mental condition;
   AND
4. There must be some attached individual identifier
   • NPP: Notice of Privacy Practice

You must have or have given to patients telling them how your practice will handle and protect their PHI.

NEXT >>