HIPAA Compliance Handbook, 2013 Edition

HIPAA Compliance Handbook is intended for HIPAA coordinators, project managers, privacy officers, compliance professionals, health care record managers, and others who have the responsibility for implementing the HIPAA Privacy and Security Regulations. It contains easy-to-understand explanations of the legal and regulatory provisions.

The 2013 Edition has been updated to include:

• Guidance on preparing for Privacy & Security Audits, including information on the new audit protocols from the Office for Civil Rights
• New section on security and cloud computing
• Updates on State Attorney General enforcement actions under HITECH, including the first case against a business associate
• Analysis of new resolution agreements between HHS and covered entities, including the first ones involving small providers or state agencies
• Updates on recent criminal enforcement in
• Revised Sample Audit Protocols
• Updated State-by-State Guide to Medical Privacy Statutes

• 1. HEALTH INFORMATION AND ADMINISTRATIVE SIMPLIFICATION
  • Administrative Simplification
  • To Whom Do the Administrative Simplification Regulations Apply?
  • Compliance Dates
• 2. ELECTRONIC TRANSACTIONS AND HEALTH INFORMATION EXCHANGES
  • The Transactions
  • Identifiers and Code Sets
  • Transaction Requirements
  • Trading Partners
  • Electronic Medicare Claims
  • Health Information Exchanges
• 3. PRIVACY REGULATIONS
  • Purpose and General Principles
  • Individual Rights
  • Use and Disclosure of PHI
  • Special Applications of the Rules Relating to Uses and Disclosures
  • Administrative Requirements
  • Business Associates
  • Other Key Concepts
• 4. SECURITY REGULATIONS
  • General Principles of the Security Regulations
  • Implementing an Effective Security Program
  • Documentation, Policies, and Procedures
  • Integration of Privacy and Security
  • Special Topics in Security
• 5. EMPLOYER-SPONSORED GROUP HEALTH PLANS
  • Applicability
  • Covered Plans
  • Non–Health Plan Information
  • Transaction Standards
  • Privacy Regulations
  • Security Regulations
  • Plan Document Requirements for Privacy and Security
• 6. ENFORCEMENT
  • HIPAA Civil Penalties
  • Civil Complaints and Investigations
  • Civil Monetary Penalty Cases
  • Resolution Agreements
  • HIPAA Criminal Penalties
  • Criminal Prosecution
  • Medicare Exclusion
  • Privacy and Security Compliance Reviews and Audits
  • No Private Right of Action
  • Using HIPAA Standards in State Law Actions
• APPENDICES
  • SAMPLE PLAN DOCUMENT AMENDMENT
  • SECURITY MATRIX
  • SAMPLE OCR AUDIT AND COMPLIANCE REVIEW MATERIALS
  • GLOSSARY OF HIPAA DEFINITIONS
  • STATE-BY-STATE GUIDE TO MEDICAL PRIVACY STATUTES
  • SUMMARY OF THE HITECH ACT'S PRIVACY/SECURITY PROVISIONS