HIPAA Crossword

5. This is a type of patient identifier considered to be PHI.
6. The HIPAA ______ Rule requires appropriate administrative, physical and technical safeguards to ensure the confidentiality, integrity, and security of electronic PHI.
8. One of top causes of data breach: lost or stolen ______ such as laptops or thumb drives.
9. By law, hospitals must train employees annually on HIPAA ____________.
12. The first “A” in HIPAA stands for:
14. Method of ensuring PHI sent via e-mail is being securely transmitted.
16. The “P” in HIPAA stands for:

1. PHI stands for _______ health information.
2. The minimum financial _____ is between $1000-50,000 per HIPAA violation.
3. An official inspection of an organization's records, typically by an independent body.
4. A reportable release, transfer, access to or divulging of patient information without proper authorization by the patient or beyond what is necessary for patient treatment.
5. Accessible PHI is limited to only information necessary for a performance of services, also described as a ________ basis (3 words).
7. It is all staff's responsibility to keep patient information __________.
10. Implementing multi ______ authorization is one method of ensuring alignment with HIPAA regulations regarding electronic access of PHI.
11. What should you never share with another individual that is used to access systems?
13. This must be provided by the patient before PHI is given to a family member or outside provider.
15. Every patient has the right to ___________ regarding disclosure of their PHI.