Questions
5.
According to APA, when is it appropriate to disclose confidential information without the consent of the individual?
6.
According to DeMuro, how did HIPAA extend the requirement of privacy protection to entities that it was not authorized to regulate?
7.
What are the six steps to Yennie’s HIPAA compliance plan?
8.
HIPAA’s privacy regulations include "data scrubbing". What is "data scrubbing"?
9.
In regard to the HIPAA confidentiality standards, what should Mental Health Professionals be especially familiar with?
10.
At what age of a child is the parent no longer the personal representative of the child for HIPAA purposes?
|
Answers
A. Mental Health Professionals should be especially familiar with explicit HIPAA provisions that are unique to psychotherapy notes. The regulations define these specifically as notes recorded in any medium by a health care provider who is a mental health professional documenting or analyzing the contents of conversation during a private counseling session or a group, joint, or family counseling session, and that are separated from the rest of the individual's medical record.
B. "data scrubbing" is removing patient identifiable information
C. (1) Educate yourself, and promote awareness and education among senior management and the board of directors. (2) Develop an organization project team for managing HIPAA compliance. (3) Conduct an organizational risk assessment. (4) Develop and implement policies and procedures to address identified risks. (5) Develop and implement staff education and training. (6) Provide continual auditing and monitoring of compliance activities.
D. Although HIPAA only authorized HHS to regulate healthcare providers, health plans, and healthcare clearinghouses, by requiring covered entities to be responsible for compliance of their business partners, HHS effectively extended the requirement of privacy protection to entities that it was not authorized to regulate.
E. Psychologists disclose confidential information without the consent of the individual only as mandated by law, or where permitted by law for a valid purpose, such as (1) to provide needed professional services to the patient or the individual or organizational client, (2) to obtain appropriate professional consultations, (3) to protect the patient or client or others from harm, or (4) to obtain payment for services, in which instance disclosure is limited to the minimum that is necessary to achieve the purpose
F. HIPAA defers to state law to determine the age of majority and the rights of parents to act for a child in making health care decisions
|