What is the purpose of the HIPAA Privacy Rule?
The HIPAA Privacy Rule, a regulation promulgated by the U.S. Department of Health and Human Services, establishes a minimum level of privacy protection for health care information. The Privacy Rule establishes a patient's rights regarding the use and disclosure of his/her health care information. It focuses on the application of effective policies, procedures and business service agreements to control the access and use of patient information. The Privacy Rule applies to health care providers, health plans, and health care clearinghouses.
Will the HIPAA Privacy Rule apply to my practice?
We believe that in the long term, all psychologists providing health care services will be subject to the Rule. We also believe that it is both wise and prudent to be HIPAA compliant for the following reasons:
- Insurance and managed care companies are rapidly moving from paper to electronic online transactions for payment and all health care operations.
- Circumstances could arise where the need for compliance is triggered by actions over which you will have no control (e.g., you may be required to respond electronically to a request for information about a patient). If this occurs, your entire practice must become HIPAA compliant immediately.
- If you bill any third-party source (e.g., HMO, PPO, Medicare) you will undoubtedly fall under the HIPAA regulations.
- It is quite predictable that all billing services will eventually move to electronic transactions to reduce the cost of manually processing claims. If you use a billing service that involves electronic transactions, you must also be compliant.
- The only possible exception to this advice would be the very few psychologists who are on a total cash basis, have no interface at any time, now or in the future, with any insurance carrier, hospital, managed care company, state or federal program, or other third-party payer that currently or in the future may require some form of electronic transaction.
Am I exempt if I do not use electronic transmissions?
You may be exempt currently if you do not submit claims electronically or participate in any third-party payment plans. However, it is unlikely you will be able to avoid all electronic transactions in the future and remain exempt, especially if you or a business associate working on your behalf transacts any health care business electronically (e.g. billing or payment for services, authorization for treatment, utilization review, and verification of coverage, etc.). That is why we recommend that psychologists who provide health care services become HIPAA compliant.
How does the HIPAA Privacy Rule impact current laws in my state?
This is one of the most important issues that must be addressed. The HIPAA Privacy Rule establishes minimum provisions for the use and disclosure of health care information. If your state laws are more protective than the minimum required by HIPAA, the state law will take precedence over the HIPAA standard. If the state law is less protective, the HIPAA provision will prevail. To comply with HIPAA, it is necessary to compare all laws related to health care delivery in your state with the HIPAA regulations. A decision must then be made regarding which regulation or statute provides the greatest level of protection of health care information. The completed analysis is then made part of the required "Notice Form."
Does each state require its own state-specific Notice Form?
Yes. The HIPAA Privacy Rule requires that covered health care providers provide their patients with a "Notice Form." The Notice Form describes patients' rights related to the use and disclosure of their health care information. The information in the form must comply with either the HIPAA requirements or the state statutes, depending on which regulation or statute provides patients with the greatest level of protection of their health care information. Given that the HIPAA regulations are highly technical and voluminous, and there are hundreds of health care provisions in each state, this will be a daunting task for psychologists. It would be very difficult for anyone without legal training or extensive knowledge of the law to develop the required Notice Form.
How can I obtain the information and state-specific forms needed to comply with the HIPAA Privacy Rule?
You basically have four alternatives: (1) review and compare the HIPAA regulations and your state laws and create your own forms; (2) hire an attorney to do the same work; (3) purchase a competing product that has not been tailored to psychologists; or (4) purchase HIPAA for Psychologists (now an online course, which was developed by The Trust and the APA Practice Organization).
What is HIPAA for Psychologists?
HIPAA for Psychologists includes a thorough analysis of the HIPAA Privacy Rule and whether HIPAA regulations or state laws take precedence in each state (critical to ensuring that practitioners are in compliance with appropriate laws). Nothing else like this exists for psychologists. You can download customized, state-specific forms, information, policies, and procedures to comply with the Privacy Rule. This interactive learning program is available online.
How much does the HIPAA course cost?
The course is available to Trust Insureds, APA Practice Assessment payers, and Dues Exempt APA members for a special price of $225 (a $150 savings), to APA Members at the Member price of $375 (a $225 savings), and to Non-Members at the full retail price of $600.
Are there other benefits to purchasing HIPAA for Psychologists?
Yes! Psychologists can obtain four hours of CE credit from an organization approved by APA to offer CE credit. If you complete the CE requirements and are insured under the Trust Sponsored Professional Liability Insurance Program, you will be eligible for a 5% premium discount on your coverage. This is an added benefit for Trust insureds and psychologists who participate in continuing education activities.
How can I purchase HIPAA for Psychologists?
The HIPAA Privacy Rule Online Compliance Course can be purchased online at the APA Practice Organization's: Practice Central.
Back to top
For more detailed answers, or if your question was not answered here, please call us at