Skip to main content

HIPAA & Chaplaincy

Chaplaincy & Recent Changes to HIPAA
Recent changes strengths the Health Insurance Portability and Accountability Act and are designed to ease the public’s overall comfort with electronic medical recording keeping. One of the most significant changes to the HIPAA regulations is the new rules concerning the breach of protected health information (PHI).

What is a Breach?

A breach is, generally, an impermissible use or disclosure under the Privacy Rule that compromises the security or privacy of the protected health information such that the use or disclosure poses a significant risk of financial, reputational, or other harm to the affected individual.

What is an example of a breach PHI?

  • An employee accesses the record of a patient outside the performance of their job duties.
  • An unencrypted laptop containing PHI is lost or stolen.
  • PHI is sent to the wrong fax, mailing address, an email address or printer.

What happens if a breach occurs?
  • Generally speaking, your institution’s HIPAA compliance officer will need to be notified of all suspected breaches immediately upon discovery of the breach.
  • The HIPAA officer determines if there exists a reportable breach.
  • If a reportable breach of PHI has occurred your institution’s HIPAA compliance office handles the notification.
  • Every individual whose unsecured PHI has been breached must be notified in writing as soon as feasible and within a 60 day period.
  • Breaches are required to be reported to Health and Human Services (HHS).
  • If less than 500 individuals are affected: log and report annually.If more than 500 individuals are affected: HHS must be notified at the same time the patient is notified. The media must also be notified.


How can Clinical Chaplains help prevent breaches of PHI?

Be alert about your responsibilities to protect PHI while carrying out your tasks. Take special care in these situations:

  • When faxing be sure to always use your institution’s official fax cover sheet and reconfirm the recipient’s fax number before transmittal.
  • Do not put PHI, including patient stickers and medication labels, in regular trash. Shred or place in privacy bins for special disposal.
  • When retrieving information from the printer or faxing PHI determine each page corresponds to the correct patient
  • Double check the name of the patient before you put information in the envelopes for mailing.
  • Log off your computer prior to stepping away from it.
  • Use password protection and encryption features for your Blackberry, cell phone and other mobile devices such as thumb drives and CDs.
  • Only store PHI on mobile devices when absolutely necessary for your institution’s business purposes and delete as soon as feasible.
  • Encrypt any email containing PHI sent outside your institution.
  • Never share your password or use someone else’s sign on information as this could lead to you being disciplined by your institution.

For further information on the new HIPAA standards follow the link below:
US Department of Health and Human Services

Popular posts from this blog

Association of Professional Chaplains Experiencing Significant Financial Challenges

The Association of Professional Chaplains recently informed its membership that the organization is experiencing “significant financial challenges.” The APC president, Sue Wintz, related in a letter to the APC membership that the association has made some $80,000 cuts to its budget. The president’s letter requested that APC members consider making a donation of at least $25, 00 to help off set any additional cuts which might have to be made to the organization’s budget. APC Board Certified Chaplains pay annual dues of $265.00 representing some of the highest fees in the profession.
Master Fezziwig Knew a Thing or Two about Celebrating Employees Borne there by the Spirit of Christmas-Past the scene opens: It is Christmas once more and Scrooge is standing outside the warehouse where once he was an apprentice. They go inside and Scrooge is delighted to find his former boss – Mr Fezziwig. Mr Fezziwig is instructing a young Scrooge and his fellow apprentice, Dick, to ready the premises for their annual Christmas party. The scene fills as in come a fiddler, Mrs Fezziwig, all the other Fezziwigs together with all the employees. They enjoy music and dancing and when finally the joyous evening comes to a close Scrooge is forced to reflect on his own treatment as an employer regarding his staff. “When the clock struck eleven, this domestic ball broke up. Mr and Mrs Fezziwig took their stations, one on either side of the door, and shaking hands with every person individually as he or she went out, wished him or her a Merry Christmas. When every...

The Founding of the College of Pastoral Supervision & Psychotherapy

CPSP was formed out of the memories of our own experience in clinical training. It was not formed around the corporate bureaucratic model, that by its very nature smothers criticism with public relations and undermines collegiality by promoting patterns of domination and submission. We remembered the redemptive process of our own clinical training, an experience that was marked by deep criticism and deep respect and care, an experience that we would never demean or trivialize by calling it skill training. We experienced our own clinical pastoral process as transformative. We sought in creating CPSP to rekindle the transformative process that seemed to be diminishing in our professional lives. We constructed the Chapter model out of our memories of the clinical training group as the best hope for fostering continuing transformation, individually and corporately. Learn more about CPSP: College of Pastoral Supervision & Psychotherapy The College of Pastoral Supervision...