Institute: ONC | Component: 2 | Unit: 9 | Lecture: c | Slide: 11
Institute:Office of National Coordinator (ONC) Workforce Training Curriculum
Component:The Culture of Health Care
Unit:Privacy, Confidentiality, and Security
Lecture:HIPAA Privacy Rule
Slide content:Notice of Privacy Practices Patient has right to Adequate notice of privacy practices Uses and disclosures of PHI Description of individual rights Covered entities legal duties One problem is readability of Notice of Privacy Practices (NPP) forms comparable to medical journal articles and beyond 80% of U.S. adults (Breese & Burman, 2005) Physicians requirements for obtaining NPP consent include Good faith effort to obtain acknowledgment during first provision of in-person service Failure to obtain is not penalized (per Bush administration revision) Many publicly available industry resources 11
Slide notes:One of the cornerstones of the HIPAA Privacy Rule is the Notice of Privacy Practices, or NPP [N-P-P]. People who have obtained health care in the United States in the last decade or so will have come across an NPP and probably had to sign it. The NPP states what the patient rights are. Under the HIPAA Privacy Rule, the patient has the right to know the privacy practices of a covered entity, such as a physician practice or hospital. The notice should contain the uses and disclosures of personal health information, including those that extend beyond TPO. The NPP should also describe individual rights as well as the legal duties of the covered entities. Part of the problem with these documents is that their readability is comparable to what is seen in medical journal articles. In other words, they are highly technical and are probably beyond the readability of eighty percent of the U.S. adult population. The 2013 HIPAA update strengthened the patients rights with increased protection and control of personal health information. There are many publicly available industry resources to assist in compliance with NPP requirements, including resources and tools available on the HHS website Notice of Privacy Practices for Protected Health Information. 11