Training is now taking place at 91探花Medical Center, Harborview Medical Center, and in other units to make sure that 91探花operations will comply with federally mandated privacy rules slated to go into effect on April 14, 2003.
These new rules, finalized just last August, were required by the Health Insurance Portability and Accountability Act of 1996, commonly referred to as HIPAA.
The regulation affects the security of systems on which patient data is stored, protections for the privacy of personal health records, and also the requirements for safeguarding individually identifiable health information, also called protected health information (PHI) under HIPAA.
Richard Meeks, HIPAA program manager for 91探花Medicine, which includes both medical centers and other patient care units, noted that many of the provisions included in the HIPAA rules are already in effect under Washington state law. While there will be some changes and new procedures, Meeks noted that his program is integrating the new requirements with current processes.
One visible addition will be a new brochure that all first-time patients receive, outlining their privacy rights and describing how 91探花Medicine uses their health information. The five fundamental patient rights, many already covered by state law, are:
鈥攖he right to file a complaint
鈥攖he right to have access to the medical record
鈥攖he right to have the record amended
鈥攖he right to an account of any disclosures
鈥攖he right to receive confidential information (for example, asking information to be sent to another address)
Health care providers and systems are, of course, still able to use individually identifiable information for treatment, payment and health care operations, such as risk management and quality assurance.
鈥淢ost of the issues we have been working on arise when individual information is conveyed outside the 91探花Medicine system,鈥� Meeks said. 鈥淲e are looking at such things as information for public health programs and trauma registries, or even record reviews by professional organizations. In some cases we may need to change our practice.鈥�
Some research work will also be affected by the new requirements. Along with tightening up security on computer systems housing PHI, Meeks and colleagues are working with the Human Subjects Division of the Office of Grants and Contracts to integrate the new rules into existing procedures for approving applications. There is a transition period allowed, Meeks noted, so that existing, ongoing projects will have time to adjust.
Training, using both classes and Web-based training sessions, has already begun at 91探花Medical Center and Harborview Medical Center. Other units, including the Neighborhood Clinics, are also being trained. The Web-based training is set up by unit, with each trainee getting an individual user ID so that it鈥檚 possible to keep track of who has completed the work.
Meeks noted that the law requires training of an institution鈥檚 entire 鈥渨orkforce,鈥� so volunteers and students, as well as regular employees, are required to complete the training.
For the 91探花Medicine system as a whole, John Coulter, associate vice president for medical affairs and executive director of health sciences administration, is designated as the 鈥減rivacy officer.鈥�
At 91探花Medical Center, Theresa Bervell is the privacy coordinator. She can be reached at 206-598-4342.
At Harborview, Ellen Rubin is the privacy coordinator and can be reached at 206-731-6048.
Meeks, the overall program manager, works out of the Northgate-area 91探花Medicine Information Technology Services office. He can be reached at 206-543-0300 or by e-mail at meeksr@u.washington.edu
The 91探花HIPAA Web site, which includes the entire list of privacy practices for the 91探花Medicine system and other information on requirements, is at