AGENDA DATE: 4/6/2016
TITLE:
Title
Designation of the County as a Hybrid Entity Under the Health Insurance Portability and Accountability Act of 1996 and the HIPAA Privacy Rule
BODY
SUBJECT/PROPOSAL/REQUEST: Resolution to designate the County as a hybrid entity under HIPAA
ITEM TYPE: Consent Action Item
STAFF CONTACT(S): Foley, Walker, Eggleston, Gerome, Davis, Blair
PRESENTER (S): N/A
LEGAL REVIEW: Yes
REVIEWED BY: Thomas C. Foley
BACKGROUND: In 1996, the federal government enacted the Health Insurance Portability and Accountability Act (HIPAA). HIPAA requires that all "covered entities" must comply with the law as well as its regulations. "Covered entities" include health plans and health care providers that electronically transmit any health information in connection with transactions for which the Department of Health and Human Services has adopted guidelines such as Medicare or Medicaid. If any portion of an entity is a "covered entity", the entire entity is subject to HIPAA and its regulations unless the entity declares that it is a "hybrid entity". The "hybrid entity" declaration specifies which portions of an organization are health care components. When an entity declares itself a "hybrid entity", only its health care components are subject to HIPAA and its regulations.
STRATEGIC PLAN: Operational Capacity: Ensure County government's ability to provide high quality service that achieves community priorities.
DISCUSSION: The Human Resources Department administers the County's health plan, and the Fire and Rescue Department electronically bills Medicare and Medicaid for emergency medical vehicle transports. Therefore, Albemarle County is a "covered entity", and the entire entity is subject to HIPAA and its regulations. All County departments are therefore subject to potential Department of Health and Human Services (DHSS) HIPAA compliance audits and enforcement actions. The adoption of the attached ...
Click here for full text