https://artifacts.trustmarkinitiative.org/lib/tips/hipaa-covered-entity-profile/1.0/HIPAA Covered Entity Profile1.0Profile of the requirements in the HIPAA Regulations (per 45 CFR Section 164) for a Covered Entity by collecting all the relevant TIPs and TDs.2017-02-17T00:00:00.000ZtrueThis document and the information contained herein is provided on an "AS IS" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.https://trustmarkinitiative.org/Trustmark InitiativePRIMARYhelp@trustmarkinitiative.org404-407-895675 5th Street NW, Suite 900, Atlanta, GA 30308https://artifacts.trustmarkinitiative.org/lib/tips/us-health-care-provider-bona-fides-profile/1.0/1US Health Care Provider Bona Fides Profile1.0Profile of the requirements for an organization to be considered a US health care provider organization.https://artifacts.trustmarkinitiative.org/lib/tips/hipaa-administrative-safeguards-profile/1.0/2HIPAA Administrative Safeguards Profile1.0Profile of the requirements in the HIPAA Administrative Safeguards section (164.308) by collecting all the relevant TIPs and TDs.https://artifacts.trustmarkinitiative.org/lib/tips/hipaa-physical-safeguards-profile/1.0/3HIPAA Physical Safeguards Profile1.0Profile of the requirements in the HIPAA Physical Safeguards section (164.310) by collecting all the relevant TIPs and TDs.https://artifacts.trustmarkinitiative.org/lib/tips/hipaa-technical-safeguards-profile/1.0/4HIPAA Technical Safeguards Profile1.0Profile of the requirements in the HIPAA Technical Safeguards section (164.312) by collecting all the relevant TIPs and TDs.https://artifacts.trustmarkinitiative.org/lib/tips/hipaa-compliance-date-for-security-implementation/1.0/6HIPAA Compliance Date for Security Implementation1.0Profile of the compliance dates for the initial implementation of the security standards according to Section 164.318 by collecting all relevant and TDs.https://artifacts.trustmarkinitiative.org/lib/tips/hipaa-privacy-rule-profile/1.0/7HIPAA Privacy Rule Profile1.0Profile of HIPAA Privacy Rule (per 45 CFR Section 164.500-599) requirements for policies and procedures for handling e-PHI.https://artifacts.trustmarkinitiative.org/lib/tds/policy-and-procedures-implementation/1.0/5Policy and Procedures Implementation1.0Specifies the that a health care related organization must implement reasonable and appropriate policies and procedures to comply with the standards, implementation specifications, or other requirements of this subpart (Section 164.300-399), taking into account the organization's size, complexity, capabilities, the costs and risks associated with security, and other factors.Business AssociateBA Covered entities must have contracts or other arrangements in place with their business associates to ensure that the business associates safeguard protected health information, and use and disclose the information only as permitted or required by the Privacy Rule.
A covered entity may be a business associate of another covered entity.]]>Covered EntityCE A covered entity may be a business associate of another covered entity.]]>DisclosureElectronic Protected Health Informatione-PHIprotected health information (PHI) that is transmitted by electronic means or maintained in electronic media.]]>Health Insurance Portability and Accountability Act of 1996HIPAAProtected Health InformationPHI

In education records covered by the Family Educational Rights and Privacy Act;

In records described at 20 U.S.C. 1232g(a)(4)(B)(iv);

In employment records held by a covered entity in its role as employer;

Regarding a person who has been deceased for more than 50 years.

HIPAA rules protect most PHI held or transmitted by a covered entity or its business associate, in any form or medium, whether electronic, on paper, or oral. PHI is information, including demographic information, which relates to the individual's past, present, or future physical or mental health or condition, the provision of health care to the individual, or the past, present, or future payment for the provision of health care to the individual. For example, PHI includes name, address, birth date, Social Security Number, a medical record, laboratory report, or hospital bill. However, reporting or aggregating data that cannot be used to individually identify a person would not be considered PHI.]]>U.S. Department of Health and Human ServicesHHS