Help your registration staff remain HIPAA-compliant
Patient Access Weekly Advisor, May 28, 2008
Want to receive articles like this one in your inbox? Subscribe to Patient Access Weekly Advisor!
“Your front desk staff touch with HIPAA at all different levels,” says Lisa Simmons, CHAM, manager of patient access at West Virginia University Hospitals, Inc., in Morgantown. “Obviously, the first part is the patient confidentiality part. The next part that they struggle with, that we have to spend a lot of time educating them on, is understanding when you can share information in the context of your job.”
As a patient access manager, you can never have too many reminders and training sessions regarding HIPAA. The following are 8 tips you can give staff members to help them remember to protect patients’ privacy:
- Never share unauthorized information. Do not share information, even with a family member, unless the patient approves it.
- Inform the patient about the hospital directory. Ask the patient whether he or she would like to be included in the facility’s directory. Some facilities give patients a number they can share with their relatives or friends that allows them to get information about their care.
- Make no exceptions for the patient’s family members. Only visitors approved by the patient may obtain information.
- Never leave a computer screen or paperwork in plain view. Turn paperwork over when you leave your desk and put it away at the end of the day, and lock your computer screen when you leave your desk.
- Keep your voice down. In some hospitals, it is impossible to keep a conversation solely between a registrar and a patient because of space constraints. Some registrars take small steps to help keep the process private, never asking for Social Security numbers unless they have to, and not yelling out patients’ names unless necessary.
- Shred all documents. The trash is the worst place to discard a document that contains patient in-formation. Shred all documents and throw them into a recycle bin, which is not as public as a trash bucket in the ER.
- Validate patient identification. Because of the potential for insurance identification fraud, registrars must be thorough in checking patients’ identification.
- Verify patient identification over the phone. Ask for a patient’s Social Security number, birth date, and anything that would help establish his or her identity over the phone before proceeding. If you are prompted to leave a message, simply identify yourself and request a callback.
Want to receive articles like this one in your inbox? Subscribe to Patient Access Weekly Advisor!
Comments
0 comments on “Help your registration staff remain HIPAA-compliant ”
Related Products
Most Popular
- Articles
-
- HIPAA Q&A: Answering service messages
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- Q&A: Coding for dry skin due to cold weather
- Q/A: Volume requirement for reporting hydration services
- Are your workforce members texting PHI?
- Topic: CMS, OESS post new security compliance review information, checklist
- What does case-mix index mean to you?
- Privacy, security concerns high in HIEs
- QA:Coding multiple initial infusions
- OB services: Coding inside and outside of the package
- E-mailed
-
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- Q/A: Volume requirement for reporting hydration services
- HIPAA Q&A: Level of encryption needed for email
- HIPAA Q&A: Answering service messages
- HIPAA Q&A: TPO disclosures to a business associate
- Are your workforce members texting PHI?
- Q&A: Coding for dry skin due to cold weather
- Hospitalist-surgeon comanagement has no effect on outcomes
- Don't let these sentinel events trigger falsely
- Correctly bill ancillary bedside procedures in addition to the room rate
- Searched
