HIPAA Privacy Rule

PHI stands for "personal health identification."

Most health-care organizations must follow the Privacy Rule.

It is OK to disclose health information as long as you do not use the patient's name.

Sign-in sheets in waiting rooms are not allowed under the Privacy Rule.

The Privacy Rule should not interfere with patient treatment.

The Privacy Rule covers only information this is stored or sent by computer.

Keeping file rooms locked and computer monitors turned away from public view are examples of reasonable safeguards.

Authorization is required to disclose any PHI.

All employees should have access to patient health information.

An ordanization will be fined for ANY disclosure of PHI.