The Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy,
Security, and Breach Notification Rules are the main Federal laws that protect health
information. The Privacy Rule gives you rights with respect to your health information.
The Privacy Rule also sets limits on how your health information can be used and shared
with others. The Security Rule sets rules for how your health information must be kept
secure with administrative, technical, and physical safeguards.
The HITECH Omnibus Rule, effective in 2013, provides increased protection and control
of protected health information (PHI). This rule also extends disclosure requirements and
associated liabilities under HIPAA to business associates. Business associates are required
to comply with the same disclosure requirements as a covered entity. These requirements
are typically outlined in business agreement with the covered entity and the business
associate
These rules are necessary to assure patients that the health information they share with
healthcare professionals will remain confidential. Critical information may be withheld by
patients if they do not feel that the confidentiality and security are not in place. This could
affect the quality, safety, and outcome of the care provided.
Health Information Management is essential for healthcare providers and other HIPAA-
covered entities to ensure patient information privacy and security. HIM involves medical
coding and billing, ensuring compliance with government regulations, and handling
customer requests for Personal Health Information (PHI). This field also involves medical
records retention and transition to electronic formats, as well as analysis of health care
trends and the implementation of improvements. Because healthcare information overlaps
many different areas in any healthcare cycle, it became necessary for many organizations
to create HIM departments to oversee these important requirements are adhered to as well
as managing training and education of staff. Healthcare Information Managers would
oversee all facets of an organization’s collection and retention of records as well as
security, privacy, analysis, and implementations, coding, billing, and compliance.
“Health Information Management (HIM) is the practice of acquiring, analyzing, and
protecting digital and traditional medical information vital to providing quality patient
care.” (AHIMA Library)
American Health Information Management Association standards of ethical coding [2016
version]. HIM Body of Knowledge. (n.d.). Retrieved May 5, 2022, from
https://library.ahima.org/CodingStandards
<
What is Health Information Management & Why is it important?<Near-term. (2018,
October 4). Retrieved May 5, 2022, from https://nearterm.com/what-is-health-
information-management-why-is-it-important/
<
What privacy and security laws protect patients' health information?<HealthIT.gov. (2018,
November 13). Retrieved May 5, 2022, from https://www.healthit.gov/faq/what-privacy-
and-security-laws-protect-patients-health-information
