Could someone look over this for me it is a paper in APA to answer 4 questions? Thanks.

HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT

HIPAA 1.

Health Insurance Portability and Accountability (HIPAA) is an act that was signed by Congress in 1996 to improve and put into place policies and procedures for protection of personnel health information (PHI) and improve the availability of health insurance. (H.R.3103).

1.) HIPAA was put in place to help set standards on protecting a patients personal health information, therefore HIPAA does affect a patient’s access to medical records. A patient can review or obtain a copy of their records by submitting, to the covered entity, (health care provider, health plan or healthcare clearinghouse) a request for such in writing or a medical release form. In which case the covered entity can release a “designated record set” of certain personal health information. (OCR 5/03) There are some exceptions to what information may be released. If the provider believes that the information may cause harm to the patient then the request may be denied. If, for some or any reason, a written request is denied then the patient has the right to file a complaint or an appeal. There should be information given if a request is denied on this process. The covered entity has 30 days from the date the request was given to respond and may charge a minimal fee for preparation of these records.

2.) Even though HIPAA was put in place to set standards to protect the privacy of patients health information, there are certain circumstances where your health information may be used: 1. Decedents -funeral directors, coroner’s and medical examiners, to determine cause of death and for identity if needed. 2. Donation and
HIPAA 2

transplant of organs, eyes and tissue. 3. Public health activities. 4. Victims of abuse, neglect or domestic violence. 5. Judicial and administrative proceedings. 6. Workers’ compensation. 7. Law enforcement purposes. 8. Research. 9. Serious threat to health or safety. 10. Essential government functions. 11. Public interest and benefit activities. 12. Treatment, payment, and health care operations. A covered entity does not have to obtain a patients authorization for the above listed circumstances. (OCR 5/03)

3.) Under HIPAA, covered entities must comply with the privacy rules. A covered entity may develop its own privacy rules that would accommodate its own needs of protected health information (PHI) management but it most comply with the HIPAA guidelines. It is the responsibility of the entity to put in place a privacy official to oversee the policies, procedures and be on hand and available to be contacted in reference to the privacy rule. (45 CFR 164.530 a ). A patient should be given a privacy notice act at his/her health facility stating how their (PHI) is being used and to whom it will be shared. The covered entity should include in the notice their duty to assure the patients privacy as well as how and whom to contact if there is a complaint or they feel that their rights have been violated. As of 2009 the Office of Civil Rights (OCR) handles complaints that are made on privacy policies, procedure and practices of HIPAA covered entities.



HIPAA 3

4.) All of the medical staff should have at least some knowledge of HIPAA concepts. It is the responsibility of the covered entity to train its personnel on the policies,
procedures and how these are to be carried out by its personnel. (CFR 45 164.530) As policies change the covered entity must educate its personnel to these changes. Therefore it is a good idea to give continuing education classes and keep policy manuals updated as the changes apply. The entity should also document all of the employees training and materials. There should be a rule or sanction in place for failure to obey the policies and procedure set forth by the covered entity. Failure or breach of this rule, depending on the severity of the act could result in suspension , termination or even imprisonment. Once the employee has joined the workforce of the covered entity than that employee should be trained in the policy and procedures in a reasonable amount of time. Training on privacy policies, procedures for following such policies and the order in which records are to be kept and disposed of should be one of the major topics of training of office personnel.
Conclusion: HIPAA has made a significant difference in the way PHI is kept and to whom and how it is be released or used. A patient now has more access and input to his/her health information and records than in the past. As technology expands so will the different ways of keeping records and the privacy measures that need to be taken to help protect patients health information.

References:

HHS/OCR 2003 pg. 718

H. R. 3103 August 21,1996

OCR Privacy Rule 5/03 pg. 4

OCR Privacy Rule 5/03 pg. 14

45 CFR 164.513 (a) (f)

45 CFR 164.524

CFR 45 164.530

While I'm reading over your paper, please study this webpage and the various links at the left:

http://owl.english.purdue.edu/owl/resource/560/01/

Just looking over what you posted, I don't see APA style. So I'll look over the content of what you wrote, and you go through it and make it follow APA formatting and citation guidelines. OK?

I have looked over this site and others. I don't understand the styles. Could you tell me why it doesn't follow apa style. I haven't done a paper in a looong time. So all of these styles are new to me.

Here are some links to show you what it looks like:

http://www.pasadena.edu/hstutoringlab/images/APAPageFormat.GIF
from http://www.pasadena.edu/hstutoringlab/apa/paperformat.cfm

and check out lots of these:
http://www.google.com/search?q=what+does+an+apa+paper+look+like&hl=en&biw=1024&bih=438&prmd=iv&source=lnms&ei=I3LRTJ3UH8P98AbKg-jBDA&sa=X&oi=mode_link&ct=mode&ved=0CBgQ_AU

1. Paragraphs are needed, with the first line indented.
2. Paragraphs are not numbered.
3. Questions to which each paragraph is responding are not included.
Etc.

This is not in APA format:

2.) Even though HIPAA was put in place to set standards to protect the privacy of patients health information, there are certain circumstances where your health information may be used: 1. Decedents -funeral directors, coroner’s and medical examiners, to determine cause of death and for identity if needed. 2. Donation and
HIPAA 2

transplant of organs, eyes and tissue. 3. Public health activities. 4. Victims of abuse, neglect or domestic violence. 5. Judicial and administrative proceedings. 6. Workers’ compensation. 7. Law enforcement purposes. 8. Research. 9. Serious threat to health or safety. 10. Essential government functions. 11. Public interest and benefit activities. 12. Treatment, payment, and health care operations. A covered entity does not have to obtain a patients authorization for the above listed circumstances. (OCR 5/03)

This reference list does not conform to APA guidelines:

References:

HHS/OCR 2003 pg. 718

H. R. 3103 August 21,1996

OCR Privacy Rule 5/03 pg. 4

OCR Privacy Rule 5/03 pg. 14

45 CFR 164.513 (a) (f)

45 CFR 164.524

CFR 45 164.530

Check here for some corrections:

https://docs.google.com/document/d/1h8lzDoFwIiKs4xzNqrprJA8DsSCbiDbO4_TULIVxfl4/edit?hl=en

Ok. I changed all of that information was the citing done right?

HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT

HIPAA 1

Health Insurance Portability and Accountability (HIPAA) is an act that was signed by Congress in 1996 to improve and put into place policies and procedures for protection of personnel health information (PHI) and improve the availability of health insurance. (H.R.3103).
Does HIPAA affect the patients access to his or her medical records? HIPAA was put in place to help set standards on protecting a patients personal health information, therefore HIPAA does affect a patient’s access to medical records. A patient can review or obtain a copy of their records by submitting, to the covered entity, (health care provider, health plan or healthcare clearinghouse) a request for such in writing or a medical release form. In which case the covered entity can release a “designated record set” of certain personal health information. (OCR 5/03) There are some exceptions to what information may be released. If the provider believes that the information may cause harm to the patient then the request may be denied. If, for some or any reason, a written request is denied then the patient has the right to file a complaint or an appeal. There should be information given if a request is denied on this process. The covered entity has 30 days from the date the request was given to respond and may charge a minimal fee for preparation of these records.
Under what circumstances can PHI be used for purposes unrelated to healthcare? Even though HIPAA was put in place to set standards to protect the privacy of patients health
HIPAA 2

information, there are certain circumstances where your health information may be used: 1.
Decedents -funeral directors, coroner’s and medical examiners, to determine cause of death and for identity if needed. 2. Donation and transplant of organs, eyes and tissue. 3. Public health activities. 4. Victims of abuse, neglect or domestic violence. 5. Judicial and administrative proceedings. 6. Workers’ compensation. 7. Law enforcement purposes. 8. Research. 9. Serious threat to health or safety. 10. Essential government functions. 11. Public interest and benefit activities. 12. Treatment, payment, and health care operations. A covered entity does not have to obtain a patients authorization for the above listed circumstances. (OCR 5/03)
Are there requirements for covered entities to have written policies? Under HIPAA, covered entities must comply with the privacy rules. A covered entity may develop its own privacy rules that would accommodate its own needs of protected health information (PHI) management but it most comply with the HIPAA guidelines. It is the responsibility of the entity to put in place a privacy official to oversee the policies, procedures and be on hand and available to be contacted in reference to the privacy rule. (45 CFR 164.530 a ). A patient should be given a privacy notice act at his/her health facility stating how their (PHI) is being used and to whom it will be shared. The covered entity should include in the notice their duty to assure the patients privacy as well as how and whom to contact if there is a complaint or they feel that their rights have been violated. As of 2009 the Office of Civil Rights (OCR) handles complaints that are made on privacy policies, procedure and practices of HIPAA covered entities.


HIPAA 3

How will employees in the medical office have to be trained regarding privacy policies? All of the medical staff should have at least some knowledge of HIPAA concepts. It is the responsibility of the covered entity to train its personnel on the policies, procedures and how these are to be carried out by its personnel. (CFR 45 164.530) As policies change the covered entity must educate its personnel to these changes. Therefore it is a good idea to give continuing education classes and keep policy manuals updated as the changes apply. The entity should also document all of the employees training and materials. There should be a rule or sanction in place for failure to obey the policies and procedure set forth by the covered entity. Failure or breach of this rule, depending on the severity of the act could result in suspension , termination or even imprisonment. Once the employee has joined the workforce of the covered entity than that employee should be trained in the policy and procedures in a reasonable amount of time. Training on privacy policies, procedures for following such policies and the order in which records are to be kept and disposed of should be one of the major topics of training of office personnel.
HIPAA has made a significant difference in the way PHI is kept and to whom and how it is be released or used. A patient now has more access and input to his/her health information and records than in the past. As technology expands so will the different ways of keeping records and the privacy measures that need to be taken to help protect patients health information.

References:

HHS/OCR 2003 pg. 718

H. R. 3103 August 21,1996

OCR Privacy Rule 5/03 pg. 4

OCR Privacy Rule 5/03 pg. 14

45 CFR 164.513 (a) (f)

45 CFR 164.524

CFR 45 164.530

OK this is not right. I did make indentions it's just not showing it on here.

I know the indentations won't show. That's OK, as long as they are in the paper you'll submit.

Have you been given directions that say you should answer each question separately? I don't see how that fits the APA format, but you should go back into your directions and find out. In normal APA papers, the text is in fully developed paragraphs without the questions included.
Sample paper in APA format:
http://owl.english.purdue.edu/media/pdf/20090212013008_560.pdf

Also, I still don't believe your reference list meets APA standards. See p. 8 in the sample paper linked just above to see what I mean.

The instructions state to answer each question and use proper citation in either APA or MLA, include reference page in either style.