At the Association of Clinical Documentation Improvement Specialists (ACDIS), questions on physician queries are never few and far between. Although AHIMA has published a couple briefs on the topic over the last decade, questions have still remained about how to implement a compliant and effective query process.
Q. A long-term care facility has deployed laptops that connect to a file server and are password protected. The laptops are not used to store PHI or other confidential data and are not removed from the facility. Do the laptop hard drives need to be encrypted?
The HIPAA Privacy Rule de-identification standard-Section 164.514(a)-includes two methods by which health information can be designated as de-identified: expert determination and safe harbor.
A death row inmate develops a lump near his breast and is sent to a local hospital for an examination. The physician wants to perform medical imaging to diagnose the lump, but correctional staff won't remove his shackles. It's impossible to perform the test wearing restraints. He returns to the prison without a diagnosis.