Privacy for I/DD Providers

HIPAA says: Document EVERYTHING!

Key Point:  If you don’t document it, you can’t prove you have followed privacy regulations — meaning you could face penalties.  Security policies and procedures are mandated under the Health Information Portability & Accountability Act (HIPAA), and the regs are very specific about the policies and procedures you need to implement. Through your documentation of […]

HIPAA says: Document EVERYTHING! Read More »

Cliff Note: How long to keep these privacy records

Since federal privacy rules require lots of documentation, a frequently asked question is:  How long do we have to keep all the documents that accumulate as a result of compliance with the Health Insurance Portability and Accountability Act (HIPAA)? The answer:  Six years — and that means six years after the date of a document’s

Cliff Note: How long to keep these privacy records Read More »

Feds send a message via one county agency

In one of the HIPAA cases most relevant to the I/DD-Residential  sector, a county agency delivering health services to low-income people settled a potential breach by paying out $215,000 to the Feds.  The agency serves a rural population of about 120,000 in Skagit County, Washington —  where nearly 18 percent of the people live below the

Feds send a message via one county agency Read More »

Cliff Note: What is Private Health Information?

That is one of the first questions that comes up about Private Health information, often referred to as PHI.  Just what do we mean by PHI? Here’s the short answer from the Feds: PHI includes any individually identifiable health information held or transmitted by an organization required to follow HIPAA rules.  Organizations required to protect

Cliff Note: What is Private Health Information? Read More »