Introduction

Back Next

What is HIPAA?

HIPAA is short for the Health Insurance Portability and Accountability Act of 1996. Through HIPAA, Congress provides federal protection for the privacy and security of patient health information. The HIPAA regulations provide guidance on privacy, security and transactions and code sets.

Privacy

The HIPAA Privacy Rule contains rules for the protection of patient health information and for patients' rights related to that information. HIPAA also requires agencies to implement policies for protecting patient health information and to permit patients to exercise their rights.

Security

The HIPAA Security Rule requires that physical and technical safeguards are developed to protect the security of electronic patient health information.

Transactions and Code Sets

The HIPAA Transactions and Code Sets Rule standardizes the way agencies send and receive billing information on the patients they treat.

Taken together, these three HIPAA Rules are designed to facilitate the development of a uniform computer-based health information system, while protecting the privacy and security of the patients' health information.

What is Covered?

HIPAA requires covered entities to protect the privacy and security of Protected Health Information (PHI). This type of information can be in oral, written or electronic form. PHI includes demographic or other identifying information that:

• Is created or received by covered entity;

• Relates to the past, present or future physical or mental health condition of an individual, provision of care to an individual; or the past, present or future payment for the provision of care to an individual; and

• Identifies the individual; or

• Provides a reasonable basis to believe the information can be used to identify the individual.