HIPAA and Business Associates Essay example

Submitted By TheJaneAllison
Words: 1672
Pages: 7
Open Document
Running Head: Business Associates, Contracts and HIPAA’s Privacy Rule

Updating Business Associate Contracts under HIPAA’s new Rule
Melissa Garcia
Texas State University
March 21, 2013

Business Associate Contracts under HIPAA Individually identifiable health information in the United States is kept under strict watch in terms of privacy. The Health Information Portability and Accountability Act (HIPAA) has determined who is able to access this information, and what they are able to do with it. A business partner under HIPAA regulations had previously been defined as one who uses individually identifiable health information – or protected health information (PHI) – from a covered entity, assists in using it, or uses the information on behalf of a covered entity (HIPAA 1996). Due to concerns about who would or would not fall into this category however, the government has decided to alter the definition. The term has been changed to business associate and has been specified to include anyone who is responsible for creating, receiving, maintaining, transmitting or has constant access to the individually identifiable health information by a covered entity, excluding members of the covered entities workforce or health care providers who use the information for the sole purpose of giving medical care (Federal Register, 2013). This paper is intended to give the reader a comprehensive overview of who is considered a business associate and the differences between the original HIPAA definition and the current one being put into effect. The reader should also be made aware of business contract information being updated, how it will be implemented, and who is being affected by it.
Public Concerns Several questions arose from the public about who will be obligated to join a business associate contract, and who will be responsible if a breach occurs under the business associate. Another large question was about the new term of a subcontractor; the public requested assurance that this was a necessary change and was concerned about the length of how far down the chain the title of subcontractor would apply.
Government Answers Focusing on the question of who takes responsibility for a breach of information under a business associates’ care, it is the business associates responsibility to immediately report any breach of information to the Department of Health and Human Services (HHS), the individuals who are affected by the breach and the covered entity or entities whom the business associate is in a contract with, regarding the information in jeopardy. By adopting the Health Information Technology for Economic and Clinical Health (HITECH) Act, the policies state that in the case of a breach that affects 500 or more individuals, the Secretary of the Department of Health and Human Services is required to post on their website a list of covered entities that experience a breach of such significance (Federal Register, 2013). When specifying who must enter into a business associate contract, it depends on the relationship the individual or organization will have with the health information and whether or not they are to use this information in any way. For example, if a janitorial service comes into contact with protected health information for cleaning purposes only, they would not have to enter into a business associate contract with the covered entity even though the service is working for the covered entity. Storage warehousing (physical or electronic) on the other hand, will be obligated to enter into contract with a covered entity due to the fact that although they may never view the PHI, the storage company is maintain it and has constant access to the health information. There is a list of basic organization descriptions who are generally obligated to join a business associate contract, and in contrast, there are several exceptions to the rule about who should enter into a business associate contract,
Show More

Related Documents: HIPAA and Business Associates Essay example

Lab 3: HIPAA

Lab 3: HIPAA HIMSS is a website that tells anyone that looks at it, what is going on. If you look up healthcare reform you are able to see all the updates that have been posted about the reform act. This can be helpful if you don’t know what the healthcare reform is or what is being changed within the act. Also you are able to look up things like health information technology. The links that I checked out about health IT seemed to have a lot of information but not in the easiest to understand if…

Words 1380 - Pages 6

Back and security needs Essay

MyPC Backup Review Editor's Review Customer Reviews Submit Review Visit Website Whether you’re a student or an office employee who frequently works on the computer, you might have experienced one of those “computer emergencies” wherein important files got accidentally deleted. You may know how to retrieve those files from the Recycle Bin or Trash folder, but what if they’re not in those folders anymore? Or maybe the important data stored in your external hard drive or some other form of backup…

Words 3724 - Pages 15

Health Care and Healthcare Organizations Essay

com/encyclopedia/Eco-Ent/Electronic-Data-Interchange-EDI.html Explain how HIPAA has changed how health care information is transmitted in EDI. When Congress adopted HIPAA in 1996 there was a great deal of commotion surrounding the new information-handling rules. Healthcare organizations spent considerable time and money on training. This was followed by significant changes in office procedures and policies fact, the original HIPAA requirements pale in comparison. Here are the most sweeping changes:…

Words 693 - Pages 3

HIPAA: Patient Privacy

The rights of patients to determine when, how, and to what extent their health information is shared with others is referred to as patient privacy. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) are the main federal laws that protect your health information. HIPAA is divided into titles. The first title is Healthcare Access, Portability, and Renewability which gives disabled persons the extended duration of benefits and lets them keep the coverage they had when they were…

Words 771 - Pages 4

Essay on Health Care Communication Methods 1

their medical information. Many of the residents will be displaced but be assured, everyone will be accommodated for. New rules As the Administrator I am governed by HIPAA rules and regulations that states all information created or received by a doctor or covered entity is PHI, (Protected Health Information) and falls under HIPAA regulation. If any information needs to be given out, the patient must be given a notice of privacy, which explains what the organization plans to do with the information…

Words 976 - Pages 4

Essay on Information Technology Acts

Health Insurance Portability and Accountability Act of 1996 (HIPAA), Public Law 104-191, was enacted on August 21, 1996. HIPPA applies to health plans, health care clearinghouses, and to any health care provider who transmits health information in electronic form. These transactions include claims, benefit eligibility inquiries, referral authorization requests, or other transactions for which HHS has established standards under the HIPAA Transactions Rule. HIPPA protects all individually identifiable…

Words 467 - Pages 2

Health Care Case Study

temperature, humidity, and power surge and failure protection devises that surround the nuts and bolts of the computer system and health records. 7. How does the business associate rule apply to the electronic health record? Applies to third party computer services; qualify as Business Associates (under HIPAA) and must enter into a Business Associate Agreement with the health-care entity. - Governed by HIPAA's Privacy Rule and its accompanying…

Words 802 - Pages 4

Essay On Security Breach

international’s Health care section Security Breach Implications By Katie Hebeisen, Communications Specialist T he Health Insurance Portability and Accountability Act (HIPAA), as amended by the Health Information Technology for Economic and Clinical Health Act (HITECH), set forth requirements for covered entities and business associates to provide notice to affected individuals, media and the Department of Health and Human Services (HHS) following a breach of unsecured protected health information (PHI)…

Words 2249 - Pages 9

Essay about Request for Proposals

PROPOSAL EVALUATION & CONTRACT AWARD RFP ATTACHMENTS: 6.1 Pro Forma Contract Contract Attachment A: Attestation Re Personnel Used in Contract Performance Contract Attachment B: Memorandum of Understanding (MOU) Contract Attachment C: HIPPA Business Associate Agreement 6.2 6.3 Proposal Transmittal/Statement Of Certifications & Assurances Technical Proposal & Evaluation Guide Section A – Mandatory Requirements Section B –…

Words 26323 - Pages 106

Compensation and Benifits Strategies Recommendations Wk3 Team A Essays

December 8, 2014 Doreen Lawrence Compensation and Benefits Strategies Recommendations In this scenario, Team A has agreed to work with a small business, Landslide Limousine. Bradley Stonefield is our client whom we must develop some compensation and benefit recommendations. Landslide Limousine is a small business with approximately 25 employees that is located in Austin, Texas. First, Team A will conduct a market evaluation by researching what companies in the relevant market…

Words 2243 - Pages 9