Have you been wondering how HIPAA will apply to you? You are not alone. Please read
these Q&As for important information.
What is the purpose of the HIPAA Privacy Rule?
The HIPAA Privacy Rule, a regulation promulgated by the U.S. Department of Health
and Human Services, establishes a minimum level of privacy protection for
health care information. The Privacy Rule establishes a patient's rights
regarding the use and disclosure of his/her health care information. It focuses
on the application of effective policies, procedures and business service
agreements to control the access and use of patient information. The Privacy Rule
applies to health care providers, health plans, and health care clearinghouses.
Will the HIPAA Privacy Rule apply to my practice?
We believe that in the long term, all psychologists providing health care services will be subject to the
Rule. We also believe that it is both wise and prudent to be HIPAA compliant for the following reasons:
Insurance and managed care companies are rapidly moving from paper to electronic online transactions for payment and all health care operations.
- Circumstances could arise where the need for compliance is triggered by actions over which you will have no control (e.g., you may be required to respond electronically to a request for information about a patient). If this occurs, your entire practice must become HIPAA compliant immediately.
- If you bill any third-party source (e.g., HMO, PPO, Medicare) you will undoubtedly fall under the HIPAA regulations.
- It is quite predictable that all billing services will eventually move to electronic transactions
to reduce the cost of manually processing claims. If you use a billing service that involves electronic
transactions, you must also be compliant.
- The only possible exception to this advice would be the very few psychologists who are on a total
cash basis, have no interface at any time, now or in the future, with any insurance carrier, hospital,
managed care company, state or federal program, or other third-party payer that currently or in the
future may require some form of electronic transaction.
Am I exempt if I do not use electronic transmissions?
may be exempt currently if you do not submit claims electronically or
participate in any third-party payment plans. However, it is unlikely you will
be able to avoid all electronic transactions in the future and remain exempt,
especially if you or a business associate working on your behalf transacts any
health care business electronically (e.g. billing or payment for services,
authorization for treatment, utilization review, and verification of coverage,
etc.). That is why we recommend that psychologists who provide health care
services become HIPAA compliant.
How does the HIPAA Privacy Rule impact current laws in my state?
is one of the most important issues that must be addressed. The HIPAA Privacy
Rule establishes minimum provisions for the use and disclosure of health care
information. If your state laws are more protective than the minimum required
by HIPAA, the state law will take precedence over the HIPAA standard. If the
state law is less protective, the HIPAA provision will prevail. To comply with
HIPAA, it is necessary to compare all laws related to health care delivery in
your state with the HIPAA regulations. A decision must then be made regarding
which regulation or statute provides the greatest level of protection of health
care information. The completed analysis is then made part of the required
Does each state require its own state-specific Notice Form?
The HIPAA Privacy Rule requires that covered health care providers provide
their patients with a "Notice Form." The Notice Form describes
patients' rights related to the use and disclosure of their health care
information. The information in the form must comply with either the HIPAA
requirements or the state statutes, depending on which regulation or statute
provides patients with the greatest level of protection of their health care
information. Given that the HIPAA regulations are highly technical and
voluminous, and there are hundreds of health care provisions in each state,
this will be a daunting task for psychologists. It would be very difficult for
anyone without legal training or extensive knowledge of the law to develop the
required Notice Form.
How can I obtain the information and state-specific forms needed to comply with the HIPAA Privacy Rule?
You basically have four alternatives: (1) review and compare the HIPAA regulations
and your state laws and create your own forms; (2) hire an attorney to do the
same work; (3) purchase a competing product that has not been tailored to psychologists;
or (4) purchase HIPAA for Psychologists (now an online course, which was
developed by The Trust and the APA Practice Organization).
What is HIPAA for Psychologists?
for Psychologists includes a thorough analysis of the HIPAA Privacy Rule and
whether HIPAA regulations or state laws take precedence in each state (critical
to ensuring that practitioners are in compliance with appropriate laws).
Nothing else like this exists for psychologists. You can download customized,
state-specific forms, information, policies, and procedures to comply with the
Privacy Rule. This interactive learning program is available online.
How much does the HIPAA course cost?
The course is available to Trust Insureds, APA Practice Assessment payers, and Dues
Exempt APA members for a special price of $225 (a $150 savings), to APA Members
at the Member price of $375 (a $225 savings), and to Non-Members at the full
retail price of $600.
Are there other benefits to purchasing HIPAA for Psychologists?
Psychologists can obtain four hours of CE credit from an organization approved by APA to offer CE credit. If you complete the CE requirements and are insured under the
Trust Sponsored Professional Liability Insurance Program, you will be eligible
for a 5% premium discount on your coverage. This is an added benefit for Trust
insureds and psychologists who participate in continuing education activities.
How can I purchase HIPAA for Psychologists?
The HIPAA Privacy Rule Online Compliance Course
can be purchased online at the APA Practice Organization's: Practice Central.