Educational Objectives:

• Describe how security and privacy are important to an admin staff member’s role in a mental/behavioral health practice.
• Perform releases of information and reception services in a manner that protects client privacy and adheres to practice policies and procedures.
• Describe and apply tech concepts as they apply to an admin staff member’s role in a mental/behavioral health clinic.
• Engage, from the admin staff member’s perspective, with the practice’s policies & procedures around security risk mitigation and contingency planning.

Syllabus:

• Getting Into a Security Mindset
  • Apply mental health professional ethics of confidentiality, records maintenance, and professional boundaries to support effective therapeutic conditions as an administrator.
  • Describe the HIPAA Security and Privacy Rules and apply them to the administrator’s role in confidentiality and record maintenance.
  • Identify common behavior mistakes administrators make in their role in office security and privacy and implement best practice HIPAA secure behavioral procedures.
• HIPAA and Client Privacy
  • Demonstrate the ability to identify Protected Health Information (PHI).
  • Describe under what circumstances it is appropriate to release PHI and identify what PHI is appropriate to disclose.
  • List the required information a HIPAA-compliant Release of Information (ROI) form must contain and use form to perform HIPAA-compliant Releases of Information.
  • Implement best practice behaviors to properly maintain security when performing a Release of Information.
• Using the Practice’s Tech In the Admin Role
  • Determine what methods of secure communication the practice utilizes and assess what communication methods are specific to your role as an administrator.
  • Demonstrate knowledge of client’s rights to secure communication under HIPAA and explain to clients the risk of nonsecure communication.
  • Prepare for accidental exposure to PHI and demonstrate competency of best practice behaviors of how administrators respond to accidental exposure.
  • Utilize the practice’s Bring Your Own Device Policy to determine how to keep your personal electronic device secure and use your device securely.
• Participating in the Practices’ Risk Management Activity
  • Demonstrate competency of the practice’s Security Policies and Procedures and assess how the policies and procedures apply to your role as an administrator.
  • Assess your role in office security and apply knowledge to support office safety.
  • Prepare to use the practice’s contingency plan in the event of a disaster, emergency, or outage and describe your role as an administrator in contingency plan execution.