What type of document is designated for use an event that a patient record is removed from the office and what information needs to be included?
Must remove charts logout/login sheet should designs to document the date. The chart was removed the patient’s name and the individual who removed the chart from the office.
What does HIPAA stand for?
Health insurance, portability, and accountability act
What must a covered entity obtain to disclose PHI?
Written authorization
What is protected health information?
Individually identifiable info that is transmitted by a covered entity
A central aspect of the HIPAA rule is to
Principle of minimum necessary use of disclosure
The patient has the right to access and obtain copies of their PHI records. HIPAA requires response time for the following copy of records and electronic copy of records.
Copy of records:15 days
Electronic copy of records: 15 days
When a patient wants a copy of their PHI records, whether it is paper or electronic how many days do you have?
15 days for both
Which government entity is responsible for hippo
US Department of health and human services
What role requires that you know where the EPHI is located on electronic devices?
Security rule
Record retention and disposal
Patient discontinues treatment: no provided period of time
Practice ceases operations: 7 years
How how should records be disposed of?
Shredded or burned(until indecipherable)
Radiographs (silver recycler)
Why was hitech established?
As a part of the American recovery and investment act of 2009, and it had modification to existing rules affecting dentistry, including the HIPAA privacy and security rules
Who won the office implements the privacy and security policies?
Privacy offer
Business associates functions include
Claim processing, data analysis, utilization review, and billing 
Covered entity, must provide a notice of its privacy practices, and information must include
Claims
Benefit plus eligibility
Referral/request
Transactions 
It is required that a new employee be trained within____ days, on HIPAAA
30
CPOE
Computerized physician order entry
EHR
Electronic health record
Major goal of security rule
Protect the privacy of individuals health info while letting covered entities adopt new technologies to improve quality/efficiency of patient care
HITECH Act
Health info technology for economic and clinical health act
OCR
Office for civil rights
CDT
Current dental terminology(procedure codes)
NPI
National provider identification rule
PHI
Protected health info
Includes health/financial info, treatment plans, billing data and personal info