Orthopedic Coding Alert
Get ePHI Hip to HIPAA
Question: Does electronic protected health information (ePHI) have to be encrypted to be HIPAA compliant? Oregon Subscriber Answer: Believe it or not, no — though it is certainly in the interests of any covered entity (CE) to take this step, and every possible precaution to safeguard ePHI. In “Security Standards: Technical Safeguards,” the Department of Health and Human Services (HHS) outlines four implementation specifications for “the technology and the policy and procedures for its use that protect electronic protected health information and control access to it.” Of the four, only two — unique user identification and an emergency access procedure — are required. The two others — encryption and decryption, along with an automatic logoff — are not. Review the brief at www.hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/securityrule/techsafeguards.pdf Why? Clearly, a CE has to do something to safeguard computers, phones, or other technology that it uses to store and transmit ePHI, and encryption is ideally suited for that purpose. But if after a risk analysis the organization decides that encryption will not help it protect ePHI from “anticipated threats and hazards” in a “reasonable and appropriate way,” then the entity must “implement an equivalent alternative measure,” according to another HHS document, “Security 101 for Covered Entities.” See the HHS tips at www.hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/securityrule/security101.pdf. In other words, encryption is not required to protect ePHI, but it is more than just a pretty good idea.
Orthopedic Coding Alert
- Medicare Final Rule:
Conversion Rate Gets Cut in Final Rule
… but there’s good news on the telehealth front. Late last year, Medicare released its [...] - HCPCS Primer:
Focus on G Codes for 2021 HCPCS Success
Medicare released its own high-level prolonged services code. It’s 2021 and you’ve got all your [...] - ICD-10 Coding:
Mind the Details When Diagnosing Stress Fractures
Remember, traumatic events don’t usually cause these injuries. You’ve had enough anxiety for the past [...] - You Be the Coder:
Coding Late December/Early January E/Ms
Question: An established patient reports to the provider for an office evaluation and management (E/M) [...] - Reader Questions:
Get ePHI Hip to HIPAA
Question: Does electronic protected health information (ePHI) have to be encrypted to be HIPAA compliant? [...] - Reader Questions:
Prevent Confusion on This Dermal Debridement
Question: Our provider just saw a patient who had a superficial linear abrasion that extended [...] - Reader Questions:
Do This for Docs With Signature Issues
Question: What can we do our surgeon’s signature is illegible? Georgia Subscriber Answer: You can [...]
