Review a new HIPAA training plan for new staff at the brand new Seattle Grace Hospital scheduled to open next June. As you know, HIPAA is a complex set of laws requiring institutions to build and maintain a compliance plan (a collection of policies and procedures, forms, training, etc.) to demonstrate their awareness of the nuances of the law.

Review the current HIPPA training plan and develop a NEW proposed plan. You have to make some changes! CITE YOUR SOURCES.  

 

Current Training Plan

Your training plan for the HIM Department staff is as follows:

• Timing of training:
  • Training should be implemented within 3 working days of beginning work in the HIM department.
  • Training should be completed within 30 days of the employee's first day in the HIM department.
• Trainer: Assistant director of HIM or designee
• Method: Computer-assisted training and traditional classroom time.
• Handouts: None
• Records: Signature of attendees
• Retention of training records: Forever in employee file
• Testing: None
• Who should be included in training: All HIM staff
• Content of Training
  • Requesters should provide photo identification and oral authorization.
  • Employees should not access charts that they do not have a business reason to access.
  • Send transcribed reports only to the physician(s) listed on the report.
  • There should be enough of an overview of functions of department so the employee knows to whom to refer people when questions or requests arise.
  • Employees should log out of the computer when they leave.
  • Passwords should be easy to remember.
  • Physicians are exempt from the TPO reasons for accessing PHI.
  • Hospital and departmental privacy policies are maintained by the secretary and are maintained in each functional area of the department for easy access.
  • Privacy problems in the department can be reported to your supervisor or the chief privacy officer.
  • PHI should only be released by authorized staff.