Text Box: actions
	Many say they are ready to conduct tests and use the transactions and code sets, but not even half of them actually are using them!
Moving forward
	One percent of providers have already begun implementation on the return on investment initiatives. These include:
Adoption of computerized practitioner order entry—placing orders directly into the computer, instead of handwriting them, which can lead to misinterpretations and mistakes.
Conversion to electronic medical records, meaning a paperless medical record for each patient.
Transacting directly with payers rather than through clearinghouses.
Sources:
HIPAA Advisory—www.hipaadvisory.com/news / Phoenix Health Systems—www,phoenixhealth.com / Healthcare Information and Management Systems Society (HIMSS) - www.himss.org
Text Box: 	Even though providers in general say they are doing the best they can to comply, especially with the Privacy Rule, there are still some out there that bluntly refuse to do so.
Enforcement Rule
	Providers’ attitude may change their mind now that the Final Enforcement Rule (see page 3) which effective date was on March 16 of this year has been published. Civil penalties may be charged to covered entities (health plans, providers, business associates, etc…) who do not comply with one or any of all the HIPAA standards: privacy, security, transactions and code set.
How do they find out?
	Mostly by complaints being reported to the Office of Civil Rights, but possibly also by Federal or State reviews. How and when that will occur is not specified in the ruling.
	Before the new rule, there has been only one conviction since 1996. At that time, only one individual, not a whole Text Box: organization, was fined: $9,000. Government agencies seem to be looking at each other in the hope that “the other” will take the burden of enforcing the rules. Millions have already been spent! And only one conviction! No wonder providers are reluctant. Why spend time, resources and money when you know you are not going to be caught?
Privacy compliance
	Still one fifth of covered entities are either unable or unwilling to implement privacy requirements. In general, the bigger the entity, the more compliant it is. Would that affect your choice of provider?
Security compliance
	Compliance is improving, but only 55 percent of healthcare providers are meeting the requirements. Note that compliance will not stop security incidents, but rather show them so breaches can be fixed. It is and will be an on going process for all industries.
Electronic trans

How effective is hipaa?

Text Box: Home Health Care Professionals, Inc.

04/03/2006

Volume 1, issue 3

Hipaa refresher 2006

To navigate use the “back” button

Page 2

 

Page 3

 

Page 4