Return to Legal and Regulatory Issues  
     
 
     
 

The Health Insurance Portability and Accountability Act (HIPAA)

 

 

Oregon hospitals and health systems understand the need for privacy of patient health information. We have always had systems in place to protect the privacy of that information. In 1996, Congress passed legislation that will significantly alter how healthcare providers, health systems and health plans go about protecting the confidentiality of personal health information. Driven by concerns about increasing use of electronic transactions, the Health Insurance Portability and Accountability Act (HIPAA) calls for new safeguards to protect the privacy and security of patient information. The Act also includes provisions requiring use of industry-wide standard codes and data sets for certain administrative and financial transactions.

In response to congressional action, the Health Care Financing Administration issued extensive and complex administrative rules implementing the privacy and transactions standards. To date, the security regulations remain in development. OAHHS formed the OAHHS HIPAA Taskforce to provide a resource for hospitals and health systems as they work to comply with these new, sometimes difficult, regulations. While OAHHS can provide information about the Transactions Standards, the focus of the HIPAA Compliance Guidelines will be on the privacy regulations and on the security regulations as they relate to compliance with the privacy standards.

The HIPAA Compliance Guidelines are intended to be a living, breathing document. As we build on the compliance information available on this site, we welcome suggestions, requests for information or questions about the law.

Top

 

 

 

 

HIPAA Compliance Guidelines

HIPAA Summary
Who Must Comply?
Organized Health Care Arrangements, Affiliated Entities, Hybrid Entities
What Information is Protected?
Privacy Notice Requirements
Release of Patient Condition/Location
Media
Disease Management
Psychotherapy Notes, HIV/AIDS, Drugs/Alcohol
Law Enforcement, General
Law Enforcement, Specific Issues
Subpoenas
Disclosure of Descendent's Records
Personal Representatives
Parents and Minors
Business Associate Agreements
Minimum Necessity Requirement
Patient Rights
Common Sources and Releases of Protected Health Information
HIPAA Preemption Analysis
Sample Forms/Policies
Enforcement

Top

 

HIPAA Security Effective Practices

HIPAA Security Effective Practices

Top

 

Additional Resources

HHS Releases Proposed HIPAA Enforcement Rule
Electronic Claims Filing; Banking Issues

Top

 

 

DISCLAIMER

The HIPAA Compliance Guidelines are provided to assist healthcare providers in complying with the HIPAA privacy and security regulations. The information on this site is provided solely for general instructional purposes and does not create a business or professional services relationship. While all reasonable attempts are made to ensure the accuracy and timeliness of all information, neither the Oregon Association of Hospitals and Health Systems nor the OAHHS HIPAA Taskforce and its members make any express or implied representations or warranties about the accuracy or timeliness of this information for any purpose or the suitability of this information for use. The information is provided with the understanding that the publisher is not engaged in rendering legal or other professional services.

This site may contain links to other web sites operated by third parties. Neither OAHHS nor the OAHHS HIPAA Taskforce or its members are responsible for any content that appears on the linked sites.

By accessing this site, you acknowledge that you have both read this disclaimer and understood its terms.

Top

 

 

Home | Contact Us
© Copyright 2008 OAHHS