Part

Competency Assessed

Instructions

1

Develop educational programs for employees in privacy, security, and confidentiality.

Develop a PPT to be used for training new staff in privacy, security and confidentiality. The training should be specific to the use of electronic systems and electronic data. The information should also include HIPAA information as it relates to this topic. The PPT should include 15-20 slides, and a reference slide at the end.

2

Create policies and procedures to manage access and disclosure of personal health information.

As part of the staff training, create a policy that will be used as a handout during the training. The policy should address general staff and what they need to know about the access and disclosure of PHI. Considerations:

1. What should a staff member do if a patient comes up to them and asks to see their record on the computer?
2. Can staff members look at PHI just out of curiosity?
3. What should a staff member do if they hear other staff members discussing a patient’s health information in the elevator?
4. What is each staff person’s responsibility for keeping PHI secure and confidential?

Your policy should address these basic types of control over access and disclosure of PHI.