ISC2 HCISPP: key terms

Flashcards for this exam ISC2 HCISPP guide

• Business AssociatePerson or organization that performs functions involving PHI on behalf of a HIPAA covered entity.Intermediate
• Business Associate Agreement (BAA)Contract required by HIPAA between a covered entity and business associate defining permitted uses and safeguards for PHI.Intermediate
• Covered EntityHealth plan, health care clearinghouse, or health care provider that conducts standard electronic transactions, subject to HIPAA.Intermediate
• De-identificationGeneral term for removing or obscuring identifiers to reduce the link between data and individuals.Intermediate
• Electronic Protected Health Information (ePHI)Protected health information created, received, maintained, or transmitted in electronic form.Intermediate
• Health Insurance Portability and Accountability Act (HIPAA)1996 US law whose administrative simplification rules protect the privacy and security of protected health information.Foundational
• HIPAA Breach Notification RuleHIPAA rule requiring notification of individuals, HHS, and sometimes media after a breach of unsecured PHI.Intermediate
• HIPAA De-identificationMethods by which health information is rendered not individually identifiable and no longer PHI: Safe Harbor or Expert Determination.Advanced
• HIPAA Privacy RuleHIPAA rule setting standards for use and disclosure of PHI and individuals' rights over their health information.Intermediate
• HIPAA Security RuleHIPAA rule requiring administrative, physical, and technical safeguards for electronic PHI.Intermediate
• HITECH ActHealth Information Technology for Economic and Clinical Health Act of 2009, strengthening HIPAA enforcement and breach notification.Intermediate
• HITRUST CSFCertifiable security and privacy framework harmonizing HIPAA, NIST, ISO, PCI, and other requirements, widely used in healthcare.Intermediate
• Minimum Necessary StandardHIPAA requirement to limit use, disclosure, and requests of PHI to the minimum needed for the purpose.Intermediate
• Protected Health Information (PHI)Individually identifiable health information held or transmitted by a covered entity or business associate.Foundational