HIPAA Legislation Guide

The Health Insurance Portability and Accountabilitylaws and standards directly apply to the following
Act or HIPAA, which was enacted by the USgroups of health care entities: health plans, public
Congress in 1996, has introduced to sweepingand private payers, health care insurers, HMOs,
changes in health care administration andMedicare, Medicaid, group health plans, health care
information systems. HIPAA is a federal law thatclearinghouses, any entity that facilitates the
has been amended to the Internal Revenue Codeprocessing of non-standard formatted health
of 1986 which intends to improve portability andinformation and must convert the non-standard
continuity of health insurance; combat waste,data into standard transactions, or vice versa,
fraud and abuse in health insurance and healthHealth Care Providers, providers who transmit
care delivery; promote the use of medical savingshealth information electronically, providers who
accounts and improve access to long-term healthreceive individual health information, and providers
care services and coverage; and simplify thewho electronically maintain health information used
administration of health insurance.HIPAA isin electronic transmissions between
designed to standardize the way all health careentities.Non-compliance with HIPAA regulations
organizations electronically exchange sensitivemay cause disruptions in an organization's
patient data and to protect patients fromday-to-day business processes, resulting in both
unauthorized disclosure of their medical recordstangible and intangible costs. The most serious
(whether paper or electronic). Under HIPAA, thereimplications of HIPAA non-compliance for health
are specific standards that all health carecare organizations include the inability to
organizations are required to adhere to. Theseeffectively conduct electronic business and the
standards include an Administrative Simplificationpotential of losing significant segments of business.
Title that is aimed at preventing health care fraudThe government also imposes some sanctions on
and abuse. Within this title, there are several lawsthose who fail to comply with the regulations of
and proposed standards including Electronic HealthHIPAA. The penalty for failure to comply with
Transactions Standards, Privacy & Confidentialityregulations goes up to $100 per violation per
Standards, Unique Health Identifiers, and Securityperson up to a maximum of $25,000 per year.
& Electronic Signature Standards.These HIPAA