Re: Another thread on Security/Privacy question

[Doug Webb]

Chistine, I'll give it a shot. My comments are below your questions.   The opinions expressed here are my own and not necessarily the opinion of LCMH.   Douglas M. Webb Computer System Engineer Little Company of Mary Hospital & Health Care Centers [EMAIL PROTECTED]   "This electronic message may contain information that is confidential and/or legally privileged. It is intended only for the use of the individual(s) and entity(s)  named as recipients in the message. If you are not an intended recipient of the message, please notify the sender immediately,  delete the material from any computer, do not deliver, distribute, or copy this message, and do not disclose its contents or take action in reliance on the information it contains. Thank you."     ----- Original Message ----- From: Christine Hudnall To: WEDI SNIP Privacy Workgroup List Sent: Friday, February 28, 2003 02:35 PM Subject: Another thread on Security/Privacy question I'm sending this out again, if someone could please help us.  Thanks. Christine What about the card swipes that we use when a patient makes a payment on their account using their credit card.  Yes, we only swipe the card and put in the last four digits of the number, but the patient name (or whoever owns the card) prints out on the receipt. Is that considered PHI, even though we are not sending them the name, but they print it from their records? I don't believe that this is, just money.  The outer envelope of your bills isn't considered PHI, either (name and return address).  The inside's another story. If so, do we need to have an agreement with the company that we use the card swipe from? And as for eligibility, i.e., Medicaid.  We use ROVR, which is through Consultec (if I remember correctly).  Is an agreement needed with them?   No. You are quering a CE for the purposes of Treatment.  Just be sure you use 270/271 or DDE to do it . And how would I check for security for their program?  Is that something they would need to do and put in writing?   You are not responsible for the Security of another Covered Entity.  They are. Sorry for all the questions, just, my co-worker and I are trying to go down list of all possibilities that we need to check on. Thanks, Christine _________________________________________________________________ Help STOP SPAM with the new MSN 8 and get 2 months FREE*  http://join.msn.com/?page=features/junkmail --- The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/.   These listservs should not be used for commercial marketing purposes or discussion of specific vendor products and services.  They also are not intended to be used as a forum for personal disagreements or unprofessional communication at any time. You are currently subscribed to wedi-privacy as: [EMAIL PROTECTED] To unsubscribe from this list, go to the Subscribe/Unsubscribe form at http://subscribe.wedi.org or send a blank email to [EMAIL PROTECTED] If you need to unsubscribe but your current email address is not the same as the address subscribed to the list, please use the Subscribe/Unsubscribe form at http://subscribe.wedi.org --- The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/. These listservs should not be used for commercial marketing purposes or discussion of specific vendor products and services. They also are not intended to be used as a forum for personal disagreements or unprofessional communication at any time. You are currently subscribed to wedi-privacy as: [EMAIL PROTECTED] To unsubscribe from this list, go to the Subscribe/Unsubscribe form at http://subscribe.wedi.org or send a blank email to [EMAIL PROTECTED] If you need to unsubscribe but your current email address is not the same as the address subscribed to the list, please use the Subscribe/Unsubscribe form at http://subscribe.wedi.org