Institute:Office of National Coordinator (ONC) Workforce Training Curriculum
Component:Introduction to Health Care and Public Health in the U.S.
Unit:Regulating Health Care
Lecture:Health Insurance Portability and Accountability Act
Slide content:Privacy Rule Requirements Notify patients of rights Allow patients to see their medical records Implement and train employees on privacy procedures Designate individual to be responsible for seeing that procedures are adopted and followed Keep patient records secure 13
Slide notes:One of the basic requirements of the HIPAA Privacy Rule is to notify patients about their privacy rights and how their information can be used. In addition, the HIPAA Privacy Rule gives patients the right to see their medical records . The Privacy Rule also has several requirements that relate to office policies and procedures. Covered entities must adopt and implement privacy procedures and train their employees to follow the procedures. Covered entities must also designate an individual to be responsible for ensuring that the privacy procedures are followed. Finally, covered entities must secure patient records so they are not easily accessible to those who do not need them. 13