HIPAA

What is HIPAA?

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) was passed by Congress to address concerns regarding the use and storage of patient identifiable health information via electronic means. This legislation establishes specific guidelines to protect the security and confidentiality of protected health care information, as well as establishing national standards for electronic transactions.

How does St. Mary's meet HIPAA requirements?

St. Mary's Medical Center is committed to protecting the security and confidentiality of patient identifiable health information and has taken several steps to address each HIPAA requirement. These steps include:

• The development of the HIPAA Task Force committee
• The appointment of Privacy Officer
• The appointment of Information Security Officer
• The appointment of Corporate Compliance Officer
• The development of privacy and security policies and procedures
• The education of all SMMC employees on HIPAA and the privacy standards on or before April 14, 2003
• The development of a Notice of Privacy Practices, informing patients of their rights under HIPAA as well as the specific practices undertaken by SMMC with specific regard to patient identifiable health information

Where can I get more information?

If you have questions pertaining to the steps St. Mary's Medical Center has taken to address HIPAA or the privacy regulations, please contact the Privacy Officer, Health Information Management Director, or Corporate Compliance Officer at:

For additional information regarding your rights and protections under HIPAA, please access the HIPAA Online web site, an interactive tool designed to help answer your HIPAA questions.