HIPAA HIO-201 - Certified HIPAA Professional

"Disclosure" refers lo employing IIHI within a covered entity.

"Disclosure" refers to utilizing, examining, or analyzing IIHI within a covered entity.

"Disclosure" refers to the release, transfer, or divulging of IIHI to another covered entity.

"Disclosure" refers to the movement of information within an organization.

"Disclosure" refers to the sharing of information within the covered entity.

Eligibility (270/271)

Premium Payment (820)

Claim Status Notification (277)

Remittance Advice (835)

Functional Acknowledgment (997)

Referral Premium Payment

Health Care Referral Certification and Authorization.

First Report of Injury.

Health Plan Referral Enrollment and Dis-enrollment.

Coordination of Referral Benefits.

Business Associate Contract

Response and Reporting

Emergency Access Procedure

Sanction policy

Risk Management

A covered entity must obtain an authorization for any use or disclosure of protected health information for marketing, except if the communication is in the form allowed by the regulations.

A face-to-face communication made by a covered entity to an individual is allowed by the regulations without an authorization

A promotional gift of nominal value provided by the covered entity is NOT allowed by the regulations without an authorization.

If the marketing is expected to result in direct or indirect remuneration to the covered entity from a third party, the authorization must state that such remuneration is expected

Disclosure of PHI for marketing purposes is limited to disclosure to business associates (which could be a telemarketer) that undertakes marketing activities on behalf of the covered entity

PKI requirements for hospitals and health care providers.

Encryption algorithms that must be supported by hospitals and health care providers.

Fraud and abuse in the health care system and ways to eliminate the same.

Guaranteed health insurance coverage to workers and their families when they change employers.

The use of strong authentication technology that must be supported by hospitals and health care providers.

270

276

278

280

834

Access Control

Audit Controls

Authorization Controls

Data Authentication

Person or Entity Authentication

The Secretary is required by statue to Impose penalties of at least $100 per violation on any person or entity that fails to comply with a standard except that the total amount imposed on any one person in each calendar year may not exceed $1,000.000 for violations of one requirement

Health plans are required to accept all standard transactions.

Health plans may not require providers to make changes or additions to standard transactions

Health plans may not refuse or delay payment of standard transactions.

If additional information is added to a standard transaction it must not modify the definition, condition, intent, or use of a data element

Business Associate Contract

Data Backup Plan

Media Re-use

Disposal

Accountability