Get RCHE HIPAA Policy And Documentation - Purdue University - Purdue

HIPAA compliance requirements include the following: Privacy: patients' rights to protected health information (PHI) Security: physical, technical and administrative security measures. Enforcement: investigations into a breach. Breach Notification: required steps if a breach occurs. Omnibus: compliant business associates.

HIPAA permits health care providers to disclose to other health providers any protected health information (PHI) contained in the medical record about an individual for treatment, case management, and coordination of care and, with few exceptions, treats mental health information the same as other health information.

HIPAA is not only for healthcare providers but also does not apply to everyone. The list below shows the entities that do not need to follow HIPAA. However, these entities should still follow state and federal laws concerning data privacy. Municipal offices and state agencies not involved in healthcare services.

Understanding HIPAA Compliance in Universities The answer is no. Educational institutions like universities are exempted from the HIPAA Privacy Rule. Even when schools provide healthcare services to students, their PHI will only be filed under education records which HIPAA does not cover.

As a Hybrid Entity under HIPAA, Purdue University's Covered Components are required to comply fully with the HIPAA Privacy and Security Regulations (45 C.F.R., Parts 160, 162 and 164).

Non-Covered Entities: Entities that are not healthcare providers, health plans, or healthcare clearinghouses, and do not otherwise meet the definition of a business associate, are not covered by HIPAA.

HIPAA requires doctors and their staff to keep your medical records confidential unless one of three exceptions applies: If you need emergency treatment; If you introduce your health or injuries in a court case; or. If the government requires specific reporting (mostly for births, deaths, and communicable diseases.

Examples of organizations that do not have to follow the Privacy and Security Rules include: Life insurers. Employers. Workers compensation carriers.