The Master paused, looked at the novice, and said "The information in your patient files does not belong to you. It is of the patient and is the patient's. You must protect it as you would precious jewels."

"But Master, we have always thought of this as information as confidential", replied the novice.

"Ah Yes, perhaps you have, but now you must provide total security within and without," smiled the Master. "For it is written that your people must only have access to this precious data as the minimum necessary to do their appointed tasks."

The Master continued, "And you must allow the people who you serve to see this information on request, and make changes they desire. You must also allow them to restrict access to it as they choose."

"And you must ask others you share this information with to treat it the same as you."

The HIPAA Master paused as he saw confusion in the eyes of the novice.

"But, Master," the novice cried. "If this is what is written it will change the way we do business!"

The Master smiled, "I see that you have begun to walk the path of HIPAA enlightenment."

next page