Basic HIPAA training typically covers the type of information related to patients that need to be protected. This is patient health information (PHI); or information that can identify or be used to identify a patient such as: 

“Names, social security numbers, account numbers, diagnosis, any dates related to any client (i.e. date of birth, dates of treatment), telephone numbers, fax numbers, and/or biometric identifiers such as fingerprints and voice prints are considered PHI.” (e.g., DCF, 2015)

However, practitioners are ONLY allowed to disclose/share patient health information if it is related to treatment, payment, or operations.

Only people who are directly involved with the case (i.e. supervisors) are granted access with a shared key when it pertains to treatment, payment, or operations; and with only the minimum information deemed necessary. By default, our system limits the amount of information shared between health providers to the “minimum necessary”.

Sign up HERE for a sample of FEMS® for Behavior Analysts.