Covered Organizations

• While the HIPAA rules protect patients' rights in a variety of circumstances, they are not comprehensive to all organizations. In fact, the HIPAA regulations only cover certain entities in regard to patient health information. Health plans are covered, such as those provided through insurance companies and HMOs. Health care providers are also covered by the act, or at least those that have an electronic component to their billing or filing. This includes most doctors' offices, hospitals and health care clinics.
  
  

Organizations Not Covered

• HIPAA regulations do not cover health information gathered and maintained by life insurance companies, most employers, workers' compensation carriers, child protective services, schools or law enforcement agencies. While these organizations may be covered under other laws and practices governing their policies, they do not have to follow the laws designed by HIPAA.
  
  

Protected Information

• Patients should be aware of what information is protected under HIPAA. This information is specified as any information health care providers such as doctors and nurses put into a patient's medical record. It also covers any information a doctor shares with nurses and staffers about a patient's condition or treatment. Billing information at a clinic or hospital is also protected.
  
  

Function

• HIPAA prescribes detailed rules on how covered organizations must protect patient information. These rules basically come down to providing reasonable safeguards to make sure patient information cannot leak to any other entity. These organizations must also draw up contracts with language specifying that contractors must use and protect information properly. Training programs and rules regarding employee access are also prescribed by HIPAA.
  
  

Effects

• In addition to protecting health records, HIPAA grants individuals the right to ask for and receive a copy of their health records at any time from any covered organization. They may also demand that corrections be made to health information where needed. Patients are also due a notice from any health care provider, detailing how their health information may be shared.