By: Annie Kamsi

By: Annie Kamsi

What is the purpose of HIPAA?

• To improve efficiency in the healthcare industry
• To improve the portability of health insurance
• To protect the privacy of patients and health plan members
• To ensure health information is kept secure and patients are notified of breaches of their health data.
• To standardizing the exchange of health information
• To encourage electronic transactions
• To improving public trust in the Healthcare System

Key Components of HIPAA

• Privacy Rule-Covered entities may disclose PHI to law enforcement upon receiving court orders, subpoenas, or administrative requests.

• Transaction and Code Sets Rule-HIPAA was created to improve the efficiency of the healthcare system by standardizing healthcare transactions.
• Security Rule-The Security Rule outlines 3 key security safeguards—administrative, physical, and technical.

• Unique Identifiers Rule-The NPI replaces all other identifiers used by healthcare plans, Medicare, Medicaid, and other government programs.

• Enforcement Rule-This rule imposes civil monetary penalties for violations of HIPAA regulations and establishes procedures for investigations and hearings related to such breaches.

Impact on the HIPAA on the EHR and clincal documentation

• The need for patient privacy to ensure their health information's security.
• To maintain the confidentiality and integrity of patient data.
• Patients can use this technology to access their health information by logging into the system at their medical facility.
• For nonclinical purposes is increasing and is source of frustration among physicians
• Physicians intentionally close slots in their agenda to complete electronic documentation of previous patients
• Outsourcing documentation management reduces the risk of HIPAA breaches.

HIPAA ethical leadership behaviors that fosters culture

• Leadership Committee-lead by Example: Senior leaders and executives should demonstrate a commitment to HIPAA compliance through their actions and decisions.

• Employee Training and Awareness-education: Conduct regular HIPAA training sessions for all employees, including management, to ensure everyone understands their responsibilities.

• Written Policies and Procedures-Develop Policies: Create clear and comprehensive HIPAA policies and procedures tailored to your organization’s needs.
• Risk Assessment and Management-Regular Assessments: Conduct periodic risk assessments to identify vulnerabilities in your organization’s data security.

• Access Control and Data Encryption-Limit Access: Implement strict access controls to ensure that only authorized personnel can access ePHI.

HIPAA ethical leadership behaviors that foster organizational development

• Integrity, compassion, respect, and accountability form the backbone of ethical leadership
• Guide healthcare leaders in building trust, supporting equitable care, and creating a positive, values-driven environment
• Enrolling in an ethical leadership course can help internalize these principles and apply them in real-world healthcare situations.
• Conduct evaluations at a regular cadence to ensure nothing falls between the cracks
• Ensure you have post-breach training available for employees to mitigate future incidents
• Prepare a breach notification process for government agencies, patients, the media and other relevant parties

HIPAA performance consistent with appropriate laws/regulations/polices

• Risk Analysis - Assessing physical locations where PHI is stored as well as reviewing technical safeguards like encryption methods.
• Training Programs-All employees handling PHI must undergo regular training on HIPAA regulations and best practices for maintaining data privacy.
• Administrative Safeguards-The development of written policies and procedures related to PHI security and privacy, designation of a privacy and security officer, workforce training on HIPAA regulations, and risk analysis and management.
• Physical Safeguards-Controlling access to facilities where PHI is stored, such as ensuring that only authorized personnel can enter secure areas, using security cameras and other security measures, and maintaining proper disposal procedures for any PHI-containing devices or media.
• Technical Safeguards-Ensuring that ePHI is protected through access controls, such as unique user IDs and passwords, encryption of data at rest and in transit, regular security updates and software patching, and monitoring network activity to identify any unauthorized access or data breaches.
• Privacy and Disclosure-Provide patients with access to their own PHI and an accounting of who has received it.
• Legal Consistency-Ensure performance is consistent with federal HIPAA regulations, but also with any state laws that offer greater privacy protection.

Reference(s)

• Proofpoint. (2021, February 26). What Is HIPAA Compliance? HIPAA Laws & Rules | Proofpoint US. Proofpoint. https://www.proofpoint.com/us/threat-reference/hipaa-compliance
• Edemekong, P., Haydel, M., & Annamaraju, P. (2024). Health Insurance Portability and Accountability Act (HIPAA). National Library of Medicine. https://www.ncbi.nlm.nih.gov/books/NBK500019/
• Adler, S. (2025). What is the Purpose of HIPAA? HIPAA Journal. https://www.hipaajournal.com/purpose-of-hipaa/
• Anwita. (2023, March 9). What is the Purpose of HIPAA [Top 5 Key Purposes]. Sprinto. https://sprinto.com/blog/what-is-the-purpose-of-hipaa/
• TalkEHR. (2023). The Relationship Between HITECH, HIPAA, and EHR. Retrieved from:https://www.talkehr.com/post/relationship-in-hitech-hipaa-and-ehr
• Colicchio, T. K., Cimino, J. J., & Del Fiol, G. (2019). Unintended Consequences of Nationwide Electronic Health Record Adoption: Challenges and Opportunities in the Post-Meaningful Use Era. Journal of Medical Internet Research, 21(6). https://doi.org/10.2196/13313
• Swapnil G. (2024). Role of Medical Documentation in Protecting Data and Ensuring HIPAA Compliance. Healthcare Outsourcing Services (BPO). https://staffingly.com/role-of-medical-documentation-in-protecting-data-and-ensuring-hipaa-compliance/
• Riddle Compliance. (2024). Building a Culture of HIPAA Compliance in Your Organization. Riddle Compliance. Retrieved from: https://riddlecompliance.com/building-a-culture-of-hipaa-compliance-in-your-organization/
• Licata, J. (2025). 7 HIPAA Compliance Tips for HIM Staff – HealthMark Group. HealthMark Group. Retrieved from: https://healthmark-group.com/7-hipaa-compliance-tips-for-him-staff/
• Edgewood Team. (2025). The Power of Ethical Leadership in Healthcare: A Guide for Professionals. Edgewood College. https://online.edgewood.edu/blog/the-role-of-ethical-leadership-in-healthcare-guide/
• Edemekong, P., Haydel, M., & Annamaraju, P. (2024). Health Insurance Portability and Accountability Act (HIPAA). National Library of Medicine. https://www.ncbi.nlm.nih.gov/books/NBK500019/

‌ ‌ ‌ ‌ ‌ ‌ ‌