Back

HIPAA Privacy

The HIPAA Privacy Rule sets national standards for the protection of individually identifiable health information by three types of covered entities: health plans, health care clearinghouses, and health care providers who conduct the standard health care transactions electronically.

You are required by law to:

1. Have written policies and procedures covering all aspects of the HIPAA law that protects individually identifiable health information.
2. Notify your patients in writing on the day of the first encounter how you will protect their identifiable health information.
3. Post your notification in your office.
4. Post your notification on your website.
   
5. Ensure your workforce is sufficiently trained on your written policies and procedures.
6. Document all uses and disclosures of patient individually identifiable health information.

This is a summary of key elements of the Privacy Rule including who is covered, what information is protected, and how protected health information can be used and disclosed. Because it is an overview of the Privacy Rule, it does not address every detail of each provision.

Summary of the Privacy Rule – READ MORE

HIPAA Privacy Checklist

Business Associate Agreement Sample

What do I have to do to become HIPAA Privacy compliant? READ MORE