I. General Information

1. Course Title:
Health Information Privacy and Security

2. Course Prefix & Number:
HINS 1120

3. Course Credits and Contact Hours:

Credits: 1

Lecture Hours: 1

4. Course Description:

This course will introduce students to the Health Insurance Portability and Accountability Act (HIPAA), Health Information Technology for Economic and Clinical Health (HITECH) Act, and the American Recovery and Reinvestment Act (ARRA) and their requirements for health information privacy and security. The course will use real-world examples to explain the privacy and security rules and will enforce students' understanding of the compliance process.

5. Placement Tests Required:

Accuplacer (specify test):

No placement tests required

Score:

6. Prerequisite Courses:

There are no prerequisites for this course.

9. Co-requisite Courses:

There are no corequisites for this course.

II. Transfer and Articulation

1. Course Equivalency - similar course from other regional institutions:

 

2. Transfer - regional institutions with which this course has a written articulation agreement:

College of St Scholastica   Articulation Signed Summer 2020 (combined with HINS 2144 for CSS HIM 3132)

III. Course Purpose

1. Program-Applicable Courses – This course fulfills a requirement for the following program(s):

Healthcare Administrative Specialist, Diploma
Healthcare Administrative Specialist, AAS
Healthcare Administrative Specialist, Certificate

IV. Learning Outcomes

1. College-Wide Outcomes

College-Wide Outcomes/Competencies	Students will be able to:
Demonstrate written communication skills	Describe the administration simplification portion of HIPAA, ARRA, and HITECH.
Analyze and follow a sequence of operations	Use HIPAA, HITECH and ARRA acts to identify process to maintain health information privacy and security.

2. Course Specific Outcomes - Students will be able to achieve the following measurable goals upon completion of the course:

• Explain how the various parts of HIPAA, HITECH and ARRA work together;
• Describe patient's privacy rights; and
• Describe the organization's responsibility to ensure health information privacy and security. 

V. Topical Outline

Listed below are major areas of content typically covered in this course.

1. Lecture Sessions

1. How health information is regulated
2. HIPAA privacy and security introduction
3. HITECH introduction
4. ARRA introduction
5. Health information and security enforcement
• Civil and criminal penalties
• Audits
• Data breaches
6. Privacy programs
• Privacy official/officer
• Policies and procedures
• Training
• Safeguards
• Documentation
• Internal assessments
7. Disclosures
• Permitted disclosures with and without authorization
• Mandatory disclosures
• Disclosure to law enforcement officials
• Accounting for disclosures
• What is required on the authorization
8. Personal Health Information (PHI)
• Definition
• De-identified data
• Statistical metho
• Safe harbor method
9. Patient rights
• Notice
• Access
• Amendment
• Complaint
• Advance directives
• Marketing
• Sale of PHI
• Fundraising
10. Data safeguards, standards and specifications
11. Administrative safeguards
• Security management process
• Assigned security responsibility
• Workforce security
• Information access management
• Training
• Contingency plan
• Business associates
12. Physical safeguards
• Facility access controls
• Workstation use
• Workstation security
• Device and media controls
13. Technical safeguards
• Access control
• Audit controls
• Integrity
• Person or entity authentication
• Transmission security
14. Organizational requirements, policies and procedures
15. Data breach documentation