Ash

HIPAA Update
J. T. AshUniversity of Hawaii SystemHIPAA Compliance [email protected]@hawaii.edu
Application of HIPAA
EssentialDefinitions
Health Information (including genetic information, whether oral or recorded in any form or medium):Iscreated or received by a health care provider, health plan, public health authority, employer, life insurer, school or university, or health care clearinghouse; andRelates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual.Individually Identifiable Health Information (IIHI):Includes demographic information that reasonably identifies an individualCreated or received by a health care provider/clearinghouse/planRelates to physical or mental health of an individual past, present, or futureInvolves past, present, or future payment for the provision of health care to an individualProtected Health Information (PHI)IIHI (that is transmitted or maintained electronically or in any other forum or medium) but EXCLUDES:IIHI in education records covered by FERPAIIHI in employment records in the unit’s role as an EMPLOYEE