HIPAA Lesson 2 Flashcards
(73 cards)
CE is an acronym for?
Covered Entity
Name the three types of CE.
- Healthcare Providers
- Health Plans
- Healthcare Clearinghouses
A _________ is any person or organization that diagnoses or treats a patient.
Healthcare Provider
A ________ is the covered entity that pays the cost of medical care.
Health Plan
A company that owns, administers, and maintains a health plan for fewer than _____ employees isn’t a CE.
50
An entity that translates nonstandard information into a standard format.
Healthcare Clearinghouses
List two other names used for clearinghouses.
- Value-added Networks
2. Switches - Works like a bus station.
What questions should be asked to figure out if an organization is a CE?
- Does the person, business, or agency furnish, bill for, or receive payment for healthcare in the normal course of business? If Yes, then go to the next question.
- Is it possible to transmit the information electronically? If Yes, go to the next question.
- Then the organization is a CE.
Name the six agreements and relationships available for healthcare entities.
- Affiliated Covered Entity (ACE)
- Business Associate Contract/Agreement (BAA)
- Chain of Trust Agreement
- Data Use Agreement
- Organized Healthcare Arrangement (OHCA)
- Trading Partner Agreement
What two forms of organization relationships does the Administrative Simplification allow to help reduce costs to organizations.
- ACE
2. OHCA
Legally separate entities that are under common ownership or control may designate themselves an __________.
Affiliated Covered Entity (ACE)
An ACE has two responsibilities.
- It must state that it will operate as an ACE.
2. It must comply with all HIPAA rqmts when it creates, receive, maintains, or transmits PHI.
Affiliated entities may have ___________in charge of HIPAA compliance.
One person or team
Multiple healthcare providers (like a hospital and a group of physicians) that typically provide healthcare to a common set of patients may designate themselves as a ____________.
Organized Healthcare Arrangement (OHCA)
In an OHCA, there’s a relationship between legally _______ organizations.
Separate
The difference between an OHCA and an ACE is that OHCA doesn’t have _________ owership.
Common
OHCA’s can disclose PHI among themselves as needed, and allows _________ of compliance activities.
Centralization and Sharing
Members of OHCA must _________ develop privacy policies, procedures, and practices.
Jointly
For a CE to be a ________ entity, one part of the organization must provide healthcare, pay for healthcare, or act as a healthcare clearinghouse, while the rest of the organization must not provide any of these services.
Hybrid
_______ are people or entities who aren’t employees of a CE, and perform certain activities on the CE’s behalf that use PHI.
Business Associates (BA)
One CE can be a ____________ of another CE.
BA
BA’s can use ____________ only to help providers and health plans carry out their healthcare functions.
PHI
Disclosures to BA’s must be the ____________ to perform the services required.
Minimum Necessary
List eight types of services that BA’s perform.
- Legal
- Actuarial
- Accounting
- Consulting
- Data Aggregation
- Management
- Administrative
- Accreditation