Health Insurance Portability and Accountability Act (HIPAA) Compliance

Abstract

Throughout this summary, references to UW Medicine include UW Medicine's workforce. (UW) is a hybrid entity with both healthcare components and non-healthcare components. UW has designated certain of its healthcare components and related covered entities as one affiliated healthcare entity known as " UW Medicine " for current list please see UW Medicine Compliance policy: PP-01 Designation of Healthcare Components at the University of Washington: Within the entities included, protected health information (PHI) may be shared for treatment, payment and healthcare operations. PHI may not be shared with the non-healthcare components of the UW without patient authorization unless it is for the component to support the treatment, payment or healthcare operations of UW Medicine. This policy describes UW Medicine's Organized Healthcare Arrangements which allow entities to share PHI for clinical care services, payment for clinical care services, and any healthcare operations activities of the organized healthcare arrangement. and until the individual's first contact with UW Medicine for services after that date, UW Medicine entities may continue to rely on the individual's " Registration Consent /Financial Agreement, " authorization, or other express legal permission to use and disclose PHI for treatment, payment, healthcare operations, or other non-research purposes. Each UW Medicine entity will obtain the individual's acknowledgement of receipt of the UW Medicine Notice of Privacy Practices or make a good faith effort to obtain an acknowledgment for all services provided after April 14, 2003. Policy 3. Administrative Requirements of UW Medicine's Privacy Program Outlines UW Medicine's policy for the administrative requirements related to privacy. Administrative requirements include administrative, technical and physical safeguards for the protection of PHI, disclosures by whistleblowers, mitigation, retaliatory acts, waiver of rights, personnel designations, revisions to privacy policies and procedures, and documentation of privacy policies and procedures.