Explore chapters and articles related to this topic
Record Recovery Work and Competency Development
Published in Sandra Rasmussen, Developing Competencies for Recovery, 2023
Two important federal laws protect this personal health information (PHI). In 1970, Congress passed the Comprehensive Alcohol Abuse and Alcoholism Prevention, Treatment, and Rehabilitation Act, part of which contained general rules establishing the confidentiality of alcohol abuse patient records. Today (1920) we have the Confidentiality of Substance Use Disorder Patient Records, 42 CFR Part 2 which regulates the disclosure and use of patient records that include information on substance use diagnoses or services. The Health Insurance Portability Accountability Act of 1996 (HIPAA) requires health care providers and organizations, as well as their business associates, to develop and follow procedures that ensure the confidentiality and security of protected health information (PHI) when it is transferred, received, handled, or shared. Because of the stigma still associated with a substance use disorder, 42 CFR Part 2 has stricter regulations about disclosure than HIPAA.
Patient Data Privacy, Protected Health Information, and Ethics of Real-World Evidence
Published in Kelly H. Zou, Lobna A. Salem, Amrit Ray, Real-World Evidence in a Patient-Centric Digital Era, 2023
Corinne S. Pillai, Eleanor E. Panico, Kelly H. Zou, Ewa Filipowska
In the context of expanding utilization of and access to Real World Evidence (RWE) and Real World Data (RWD), privacy and the appropriate use of such data are of utmost importance. The United States (US) Health Insurance Portability and Accountability Act of 1996 (HIPAA 1996, Summary of HIPAA privacy rules) is a federal law enacted in August, 1996, which required the creation of national standards that would prevent the disclosure of patient sensitive health data without their prior consent or knowledge. The US Department of Health and Human Services (“HHS”) issued the HIPAA Privacy Rule, to allow for implementation of the requirements of HIPAA. Whilst ensuring the privacy and protection of individuals’ health information, HIPAA enables the appropriate flow of this information to facilitate and support high quality healthcare (HIPAA 1996). Individuals and organizations, such as healthcare providers, health plans and healthcare clearinghouses, herein referred to as “Covered Entities” subject to the Privacy Rule, are required to abide by standards which address the use and disclosure of individuals “protected health information” or (PHI). Any individually identifiable health information held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral is considered PHI (Summary of HIPAA privacy rules).
Consumer Access and Control of Data, Data Sharing, Consumer Participation
Published in Connie White Delaney, Charlotte A. Weaver, Joyce Sensmeier, Lisiane Pruinelli, Patrick Weber, Nursing and Informatics for the 21st Century – Embracing a Digital World, 3rd Edition, Book 4, 2022
When technology intersects with consumers and their individually identifiable information, the first questions asked are: ‘what about privacy?' and ‘what are the “consent” requirements?' HIPAA information privacy, security and breach notification rules, and other regulations like 42 CFR Part 2 (sensitive data related to chemical dependency) form the legal basis of the health data sharing transaction. Information privacy refers to the ability of an individual to prevent certain disclosures of personal health information to any other person or entity (Markel Foundation, 2006; Markel Foundation, 2010). Data security addresses the protective measures (administrative, physical and technical safeguards) that limit or grant access to individually identifiable information based on authorization or permissions according to HIPAA (Rothstein, 2007; U.S. Department of Health & Human Services, 2013). The HIPAA breach notification rule links privacy and security controls to a duty to notify a consumer of the unauthorized access of their protected health information (PHI). Consent is expressed as an informed choice related to the individual's preference to share or withhold health information and specially protected data. Together, the three concepts of privacy, data security and consent are the contemporary underpinnings for trust in electronic health information exchange.
Black Student-Athletes and racism pandemic: Building antiracist practices in athletics
Published in Journal of Applied Sport Psychology, 2023
Peter Economou, Tori Glascock, Alexander Gamble
After obtaining IRB approval, semi-structured interviews were conducted over Zoom, with only the audio file from Zoom saved to transcribe the interviews, which were encrypted and Health Insurance Portability and Accountability Act of 1996 (HIPAA) compliant. HIPAA protects the privacy of certain individually identifiable health data, known as protected health information (PHI) (Centers for Disease Control & Prevention, 2003). Interviews were destroyed after transcription and no personal identifiers were retained. The participants for this study were actively selected based on targeted criteria: Black, any gender, and a participant as an NCAA student-athlete. Purposeful sampling was employed to obtain diverse qualitative interviews that allowed for in-depth study. Purposeful sampling also allows for “the selection of particular subjects who are believed to possess the necessary insight and experience to (a) offer a unique understanding and (b) contribute to expansive theory development” (Armstrong & Jennings, 2018, p. 354).
Legal aspects of information sharing and communication by poison centers in the United States
Published in Clinical Toxicology, 2020
Amy McDonald, Leslie Francis, Barbara Insley Crouch, Mollie Cummins
HIPAA defines PHI through linked definitions of health information, identifiable health information, and protected health information [2]. Health information is any information, whether oral or recorded in any form, that relates to the past, present, or future physical or mental health or condition of an individual, the provision of health care to an individual, or payment for the provision of health care to an individual; and that is created or received by a health care provider, health plan, public health authority, employer, life insurer, school or university, or health care clearinghouse. If a PCC is an entity on this list, such as a health care provider or public health authority, information that it receives relating to the condition or the health care of the individual is health information. Health information is identifiable if it identifies the individual or if there is a reasonable basis to believe the information can be used to identify the individual. PHI is identifiable health information that is transmitted by electronic media, maintained in electronic media, or transmitted or maintained in any other form or medium.)
Acute transient large-angle exotropia caused by traumatic orbital contusion
Published in Orbit, 2018
Jay C. Wang, Alexandra T. Elliott
Acute strabismus associated with orbital trauma most commonly occurs following an orbital fracture due to entrapment of an extraocular muscle or acute soft tissue swelling, or more rarely, direct injury to the extraocular muscle. Transection, disinsertion, or rupture of one or more of the extraocular muscles can lead to large-angle strabismus requiring surgical repair. A large-angle strabismus in the absence of orbital fracture or muscle transection, however, is unusual.1 Here, we report a case of an 8-year-old boy who presented with a large-angle exotropia following ocular trauma who was found to have an orbital contusion involving the left medial and lateral rectus muscles. Collection and evaluation of protected health information was HIPAA-compliant. Written consent for permission to publish clinical photographs and the details of this case was obtained from the patient’s parents.