Health Information Compliance Alert
Use Real-Life Examples For Most Effective HIPAA Training
PDF
One size does fit all where HIPAA privacy training is concerned. If you're planning to educate only your managers on HIPAA privacy compliance in hopes that the crucial information will trickle down to your front-line staff, you need to reassess your strategy.
"You can't say, 'OK, I'm going to train the top three people in my organization and therefore I'm going to be done with my HIPAA privacy training because they're going to understand everything and will be there to answer questions," warned Kristen Baum of Joliet, IL-based Murer Consultants, at an Eli teleconference on HIPAA privacy training. "That's not going to cut it. The rule is very specific about having everyone in your organization trained on privacy."
Co-presenter Michael Murer pointed out that failing to train everyone on your staff comes with a hefty price tag. "[HIPAA training] requires the involvement of everyone who is associated with your institution, because the penalties are harsh," he cautioned.
How harsh?
Civil penalties under HIPAA carry fines of $100 per incident, capped at $25,000. However, the cap applies only to violations of the same requirement; if you violate different sections of the rule, you could face multiple civil violations.Meanwhile, knowing violations of the regulations carry criminal fines of as much as $50,000 or a year in prison. In addition, tort lawyers are likely to use the law to sue providers for damages.
Murer elucidated the characteristics of an effective training program. Such a program, he explained, is:
Functional.
A training program that takes a purely theoretical approach won't work. Instead, it should be built around real-life examples. "Make them interesting," Murer urged. "Give a lot of detail so [trainees] say, 'This is like a case we had. This is like something that we've seen.'"Analytical.
Trainees should be allowed to talk about how to apply the rule in different cases, not only to improve their understanding of the rule, but also to improve your organization's compliance efforts. "You need to be able to find the people who understand what it is that you're trying to teach them, so that they can be the [knowledge] base for that part of the organization," he explained.Matrixed.
Murer pointed out that health care organizations deal with many different kinds of staff, professional and nonprofessional, as well as outside contractors, and that creates a complex matrix of relationships. "Who can have what information, who can't have what information, where are the limits, how is the information transmitted. All of these are concerns of your training program," Murer noted.As an example, he described a scenario where a facility accountant reviews a patient's file for billing purposes, then attends a cocktail party where he sees the patient's physician. What, if anything, can the accountant say?
And what happens when a janitor sees a patient's records lying on a clinician's desk? Effective HIPAA training would address these situations, the presenters said.
"Organizations in health care know how to treat patients, how to bill, how to administer," Murer said. "Now they have to learn how to protect individually identifiable health information."
Health Information Compliance Alert
- SECURITY COMPLIANCE:
Don't Deep-Six Your Security Ship
Expert tips for smooth security incident sailing. Need help understanding what a security incident is [...] - National Provider Identifier Update:
Keep Your Legacy Numbers To Avoid Pay Glitches
Don't remove all of your legacy numbers from the National Provider Identifier (NPI) database. If [...] - Technology Update:
CMS Gives Green Light To Personal Health Records Pilot Program
Check out what Medicare is doing to help beneficiaries. The Centers for Medicare & Medicaid [...] - Security:
'Scrub-A-Dub-Dub': Sanitize Your PHI
Take the sledgehammer approach if need be, experts advise. Covered entities, be forewarned: If state [...] - You Be The Security Expert:
Should We Ask Patient Before Disclosing 'Reportable Disease'?
Read the question below and decide how you would handle it before you compare it [...] - Training:
Use Real-Life Examples For Most Effective HIPAA Training
One size does fit all where HIPAA privacy training is concerned. If you're planning to [...] - Reader Question:
Power of Attorney Remains Intact
Question: How does the Privacy Rule affect how hospitals should treat power of attorney? Does [...] - Reader Question:
PHI Access For Mentally Retarded
Question: I work in a small, state-funded clinic that sees many patients (adult) with mental [...] - Reader Question:
Minors Retain HIPAA Rights
Question: What happens to a minor's health information Ð in terms of access Ð when [...] - Industry News:
Post-Acute Assessment Reform Demo Looking For You
Get a sneak peak at a tool that could reshape your patient evaluations. A demonstration [...] - In other news...
You'd better make sure your HIPAA policies and procedures are up to snuff. The feds [...]