HIPAA/Medical Records
Internet Resources by Topic
ACHA thanks its committee, coalition, task force, and section volunteers for providing resources and links concerning this topic. ACHA does not endorse or accept responsibility for the content or use of external websites.
HIPAA Regulations
- DHHS HIPAA Administrative Simplification
- Complete text of proposed and final rules for all parts of HIPAA
- Fact sheet (summary) for each proposed or final rule
- HIPAA Implementation guide
- Link to download Transactions and Code sets
- Subscription to HIPAA-REGS listserve
- FAQ list including ability to submit questions
- Background/History of HIPAA
- Office of Civil Rights
- Text of final Security rule [pdf]
- Text of Modifications to Transactions and Code Set Standards [pdf]
- Text of final Privacy rule [pdf]
- Fact sheet (summary) for Privacy rule
- Guidance on Privacy rule including ability to submit questions
Comprehensive Resources
HIPAA Privacy Rule
- HIPAA Security and Privacy Policy Checklist [pdf]
- American Health Information Management Association (AHIMA)
- AHIMA position statement on Privacy Official
- Sample Privacy Officer job description
- For recommended articles, navigate to HIM Resources>Journal of AHIMA>Select Journal Articles
- "HIPAA on the Job" series includes checklists on the following:
- HIPAA Training (including sample database)
- Release of Information policy/procedure
- HIPAA issues for telecommuters
- HIPAA transaction data mapping (including sample data map)
- Patient rights requirements
- Forms and documentation for HIPAA
- Documenting compliance
- "Countdown to Compliance: Privacy" includes:
- Organizational assessment guidelines
- Definition of Privacy Officer
- Developing a HIPAA privacy "To do" list
- List of policies
- Sample compliance HIPAA timeline
- "Ready, Set, Assess" includes:
- HIPAA Privacy assessment action plan and benchmarks
- Health Privacy Project
- "State Law" section summarizes the Privacy Laws for each state, may help determine how your state statutes compare to HIPAA
- U. S. Department of Education Family Educational Rights and Privacy Act (FERPA)
- Text of FERPA regulation
- History of FERPA
HIPAA Security
- CPRI Toolkit: Managing Information Security in Health Care
- HIPAA Security and Privacy Policy Checklist [pdf]
- HIPAA Security Rule Toolkit
The National Institute of Standards and Technology (NIST) HIPAA Security Toolkit Application is intended to help organizations better understand the requirements of the HIPAA Security Rule, implement those requirements, and assess those implementations in their operational environment. Includes a HIPAA Security Rule Toolkit User Guide that explains how to use the toolkit.
