1. Protected Health Information (PHI) Safeguards
✔ Electronic Security: Encrypt billing software and emails containing PHI
✔ Paper Records: Secure locked storage for physical documents
✔ Access Controls: Limit staff access to only necessary patient data
2. Permissible Disclosures
✔ Insurance companies for payment purposes
✔ Healthcare operations (quality assessments, audits)
✔ When required by law (court orders, public health reporting)
3. Common Violations to Avoid
✖ Discussing patient bills in public areas
✖ Sending unencrypted emails with detailed billing information
✖ Failing to properly dispose of billing documents (use shredders)
4. Staff Training Requirements
✔Annual HIPAA certification for all billing staff
✔Specific protocols for handling phone inquiries
✔Procedures for reporting potential breaches
5. Patient Rights Under HIPAA
✔Request corrections to billing errors
✔Obtain copies of billing records
✔Restrict disclosures to certain parties
