Title: Examine laws and regulations regarding the Privacy Rule and HIPAA.
Course: Healthcare Information Security (14157-II) > Section: Exploring HIPAA Basics

Examination should include federal laws and regulations addressing confidentiality, privacy, and security, such as

- Privacy Rule (https://www.hhs.gov/sites/default/files/privacysummary.pdf)
- Security Rule (https://www.hhs.gov/hipaa/for-professionals/security/index.html)
- Patient Safety Rule (https://www.hhs.gov/hipaa/for-professionals/patient-safety/patient-safety-rule/index.html)
- HIPAA Enforcement Rule (https://www.hhs.gov/hipaa/for-professionals/special-topics/enforcement-rule/index.html)
- Omnibus Rule (https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/combined-regulation-text/omnibus-hipaa-rulemaking/index.html)
- HIPAA Breach Notification Rule (https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html)
- Health Information Technology for Economic and Clinical Health (HITECH) Final Rule (https://www.hhs.gov/hipaa/for-professionals/special-topics/hitech-act-enforcement-interim-final-rule/index.html).

Teacher Resource:

Summary of Selected Laws and Regulations Addressing Confidentiality, Privacy, and Security (https://www.healthit.gov/sites/default/files/privacy-security/federal-privacy-laws-table2-26-10-final.pdf), ONC.

Process/Skill Questions:

- What is the difference between confidentiality and privacy?
- What does the Omnibus Rule address?
- What patient safety rules address confidentiality, privacy, and security?
- What is the formal process for a breach notification investigation?
- What is the HITECH Act and meaningful use? What are the goals of the HITECH Act of 2009?
- How does the HITECH Act enhance the security and privacy protections of HIPAA?