Title: Describe the evolution of the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
Course: Healthcare Information Security (14157-II) > Section: Exploring HIPAA Basics

Description should include

- Standards for Privacy of Individually Identifiable Health Information (https://www.federalregister.gov/documents/2000/12/28/00-32678/standards-for-privacy-of-individually-identifiable-health-information%22%3e)
- U.S. Department of Health and Human Services (HHS) Privacy Rule (https://www.hhs.gov/hipaa/for-professionals/privacy/index.html)
  - knowledge of protected health information (PHI) by covered entities
  - standards for individuals’ privacy rights to control how their health information is used
  - implementation and enforcement by the Office for Civil Rights (OCR)

- Administrative Simplification rules (https://www.hhs.gov/hipaa/for-professionals/other-administration-simplification-rules/index.html) application to
- health plans
  - healthcare clearinghouses
  - healthcare providers who transmit information in electronic form

- Computer-Based State Attorneys General Training Modules (https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/state-attorneys-general/index.html)
- Office of Civil Rights: Privacy, Security, and Electronic Health Records (https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/understanding/consumers/privacy-security-electronic-records.pdf)
- Office of Civil Rights: Sharing Health Information with Family Members and Friends (https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/understanding/consumers/sharing-family-friends.pdf?language=en)
- Office of Civil Rights: Your Health Information Privacy Rights (https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/understanding/consumers/consumer_rights.pdf)
- NICCS HIPAA Compliance Officer Training (https://niccs.us-cert.gov/training/search/supremus-group-llc/hipaa-compliance-officer-training-certified-hipaa-privacy)
- U.S. Dept. of Health and Human Services OCR Brief: Summary of the HIPAA Privacy Rule (https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html)
- Glossary: HIPAA Enforcement Training for State Attorneys General (https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/state-attorneys-general/index.html).

Teacher Resource:

Health Insurance Portability and Accountability Act of 1996 (HIPAA) (https://aspe.hhs.gov/report/health-insurance-portability-and-accountability-act-1996), U.S. Department of Health and Human Services

Process/Skill Questions:

- Who is responsible for the enforcement of the HIPAA Act of 1996?
- What is the protocol for reporting HIPAA violations and concerns?
- What are the covered standards of PHI, and how are they used?