Page 8 - July 2020 Ulupono

What happens after a HIPAA breach?
by Andrea Suzuki, Director of Compliance
We all have a basic idea of what a HIPAA breach is – it’s the access, use, or disclosure of protected health information in a manner not otherwise permitted by law. This includes unauthorized access by employees and third parties, improper disclosure, and exposure of protected health information. This can include handing discharge instructions to the wrong patient, or improperly disposing of paper with PHI on it. But do you know what happens after a HIPAA breach occurs?
Notification to the Secretary of the Department of Health and Human Services
By law, AH Castle has to report the HIPAA breach to the Secretary of the Department of Health and Human Services.
Notification to the Affected Individual
We are also required to inform the individual that was impacted, by letter, that their
information was improperly disclosed or accessed. The letters that we write have to explain what happened; what information was exposed; what we, as a facility, are doing to mitigate the harm; a summary of the actions that we’ll take to prevent future breaches; provide information on how the breach victim can limit harm, and provide them with our contact information so that they can follow up if they have any further questions. The method of notice differs depending on how many individuals were impacted by the breach.
Notification to the Media
If the breach affected more than 500 individuals, we are required to notify prominent media outlets throughout the state. This ensures that information regarding the breach reaches as many breach victims as possible.
Notification on AH Castle Website
If we lack the up to date addresses of at least ten impacted individuals, then we have to provide notice of the breach on our AH Castle Website; the notice has to contain all of the relevant breach information.
It’s important to understand that the improper disclosure of PHI triggers a cascade of events that are both damaging
and uncomfortable for the patient and the hospital. But with consistent and regular actions, like using two patient identifiers, using the shred bins, and logging out of computers when you’re done, we can achieve a breach free environment that ensures better quality of care for our patients.
Live online fitness classes available at special rate for Castle associates and their household
by Tracie Ann Tjapkes, Director of Wellness & Lifestyle Medicine
The Wellness team has been hard at work implementing new online fitness classes.
These classes are now available to Adventist Health Castle associates (all AH badge wearers) for purchase at the Monthly Unlimited Household Pass for 50% off. That’s $20 going forward. To see all online fitness offerings visit: tinyurl.com/ castlefit
J
8
ULY
|
202
U
0
LU
P
-
-
0
U
O
L
N
U
O
PO
N
J
O
ULY 2
|
02
8