HIPAA

1. 
HIPAA ONLY
A patient health information belongs to the clinic and you can only share parts of it with the patient

2. 
HIPAA ONLY
A referral clinician such as an Oral& Maxillofacial surgeon is a Business Associate

3. 
HIPAA ONLY
Endpoint security helps reduce the threats and vulnerabilities to PHI

4. 
HIPAA ONLY
If you want to display a picture of a paient you must get a specific signed authorization for that specific use or purpose, which extends beyond patient health care needs

5. 
HIPAA ONLY
PHI sharing by unpaid gmail/yahoo or hotmail is possible if the files are encrypted

6. 
HIPAA ONLY
Employee "right to know" law mean every employee has the right to know of the hazard posed by chemicals at the workplace or clinic

7. 
HIPAA ONLY
Even a remote information storage/clinical information back-up company is a Covered Entity

8. 
HIPAA ONLY
Likelyhoodof threat can be high, medium or low

9. 
HIPAA ONLY
Electronically shared PHI need not be protected as it only shared with other covered entities

10. 
HIPAA ONLY
We must obtain a signed conset again to shar the PHI with a referral specialist

11. 
HIPAA ONLY
Penalties for employees and the owner could be financial and criminal

12. 
HIPAA ONLY
safety data sheets must be read and used by the clinic employees

13. 
HIPAA ONLY
Breaches can involve 500 patients or less (small), or could be 500 patients or more (large)

14. 
HIPAA ONLY
The clinic needs to protect the patient's personal, financial and helth information