Secretary
The Secretary of Health and Human Services or any other officer or employee of HHS to whom the authority involved has been delegated. [45 CFR 160.103]
|
Security
HIPAA health information privacy rules will require staff training, physical and informational security measures, and safeguards for protecting health information. Training must be documented and must be provided to new employees within a reasonable time.
|
Security Incident
Security Incident means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of information or interference with system operations in an information system.
|
Security or Security Measures
Security or Security Measures encompass all of the administrative, physical, and technical safeguards in an informational system.
|
Segment
A group of related data elements in a transaction. [45 CFR 162.103]
|
Small Health Plan
1. A health plan with annual receipts of $5 million or less. [45 CFR 160.103]
2. A group health plan with fewer than 50 participants.
The HIPAA does not define a "small health plan" but instead leaves the definition to be determined by the Secretary. The Conference Report suggests that the appropriate definition of a "small health plan" is found in current section 2791(a) of the Public Health Service Act, which is a group health plan with fewer than 50 participants.
|
Standard
A prescribed set of rules, conditions, or requirements describing the following information for products, systems, services or practices:
- Classification of components.
- Specification of Materials, performance, or operations.
- Delineation of procedures. [45 CFR 160.103]
A standard is a mechanism or process used to implement a policy. For example, if an Internet use policy blocks access to pornography across the entire organization, it would be possible to set up a computer server to detect violations of this policy. A network administrator would have to configure a rule to “block pornography” at each office or point where users can access the Internet. Note that a standard is not a step-by-step instruction set but a standard solution to a policy.
Related Terms: Maintenance; National Council for Prescription Drug Programs
|
Standard Setting Organization (SSO)
An organization accredited by the American National Standards Institute [ANSI] that develops and maintains standards for information transactions or data elements, or any other standard that is necessary for, or will facilitate the implementation of, this part. [45 CFR 160.103]
|
Standard Transaction
A transaction that complies with the applicable standard adopted under this part. [45 CFR 162.103]
|
Standard Transaction Format Compliance System (STFCS)
An EHNAC-sponsored WPC-hosted HIPAA compliance certification service.
See also: EHNAC, WPC
Related Terms: Washington Publishing Company
|
State
Refers to one of the following:
- For a health plan established or regulated by Federal law, State has the meaning set forth in the applicable section of the United States Code for such health plan.
- For all other purposes, State means any of the several States, the District of Columbia, the Commonwealth of Puerto Rico, the Virgin Islands, and Guam. [45 CFR 160.103]
|
State Administrative Codes
see Administrative Code
|
State Uniform Billing Committee (SUBC)
A statespecific affiliate of the NUBC.
|
Statement of Work (SOW)
Document describing the specific tasks and methodologies that will be followed to satisfy the requirements of an associated contract or MOU.
See also: MOU
Related Terms: Memorandum of Understanding
|
Strategic National Implementation Process (SNIP)
A WEDI program for helping the health care industry identify and resolve HIPAA implementation issues.
Related Terms: Workgroup for Electronic Data Interchange
|
Structured Data
Usually refers to data in which the meaning of a given part can be inferred by its location within an overall structure, such as a record layout.
See also: unstructured data.
|
Subcontractor
A person or entity that enters into a subcontract to carry out, assist with the performance of, or perform on behalf of a business associate and thereby assumes some of the obligations of the contract between the business associate and the covered entity.
|
Summary Health Information
Information that summarizes claims history, claims expenses, or types of claims experienced by individuals for whom a plan sponsor provides health benefits that may be individually identified.
|
