Unit 2 Exam Flashcards
(136 cards)
What is required for a medical malpractice suit against a doctor?
A Physician-Patient Relationship
The relationship between physician and patient may be based on a contract that is what?
Expressed or Implied
What may contracts between the physician and the patient contain?
Exculpatory Clauses
What did the court do in the case of Tunkl v. Regents of the University of California?
In this case, the court refused to recognize exculpatory clauses.
What did the court decide in the case of Tunkl v. Regents of the University of California?
In this case, the court ruled that a release waiving any malpractice liability of a non-profit is unenforceable.
What do physicians have a duty to regarding the information given to them by patients?
Confidentiality
What is the confidentiality of medical records protected by?
State and Federal Statutes
Why is confidentiality and privacy protection desirable?
It encourages HIV/AIDS testing.
When was HIPAA passed?
1996
What was an issue that the passing of HIPAA addressed?
The privacy and security of “Protected Health Information” (PHI).
What are the three main regulations issued under HIPAA?
1.) Privacy Rule
2.) Security Rule
3.) Breach Notification Rule
How does a healthcare provider become subject to the Privacy Rule?
A healthcare provider must engage in certain electronic transactions, such as claim filing.
What is the Administrative Simplification Compliance Act?
This legislation, passed by Congress in 2001, requires electronic Medicare billing.
What did the Center for Medicare and Medicaid do on October 1, 2005?
The CMM ended its HIPAA “contingency plan,” meaning only standard electronic transactions would be accepted for payment through the Medicare System.
What did the Privacy Rule provide for covered entities?
Covered entities may without patient consent, authorization, or permission, use Protected Health Information (PHI) for treatment, payment, and healthcare operations (TPO purposes).
What can covered entities adopt?
A formal document called a Notice of Privacy Practices.
What is the Notice of Privacy Practices used for?
It is used to advise patients of their HIPAA privacy rights and how to file complaints about the misuse of their PHI.
What are covered entities required to do when the inspection and copying of their PHI is needed?
Covered entities must provide access and permit patients to conduct such activity.
What does a patient have the right to ask a covered entity to do regarding their PHI?
Patients can ask a convered entity to amend their PHI.
What are providers not required to do if they find a health record to be complete and inaccurate?
Providers are not required to ammend the PHI, but patients still have the right to append a “Statement of Disagreement” to their medical record.
Patients have a right to request a covered entity to list all disclosures of their PHI in a how many years-long period?
6-year period, through routine disclosure for TPO is exempt from the accounting requirement.
Who are patients allowed to file complaints against regarding a provider’s misuse of PHI?
The covered entity and the Secretary of Health and Human Services.
Covered entities must train who regarding the Privacy Rule (HIPAA)?
All members of their workforce.
Who must covered entities appoint and what does this individual do?
A Privacy Officer who must maintain files to demonstrate compliance in the event of a compliance review by HHS.