HIPAA - Privacy Act
Provisions of the Act
The scope of the Privacy Act does not apply to every individual but to the records held by an Agency. Certain significant and notable issues relating to the provisions of the Act are enumerated below:
|
Privacy Act 1974 |
|
|
Provisions |
Exceptions to Rule (Conditions of Disclosure) |
|
Department of Justice specifies: |
√ For statistical purposes by the Census Bureau and the Bureau of Labor Statistics |
|
All Agency to have a Data Integrity Board |
√ For routine uses within a U.S. government agency |
|
Collate and publish data on all complaints and actual occurrences of violations and corrective action taken. |
√ For archival purposes "as a record which has sufficient historical or other value to warrant its continued preservation by the United States Government" |
|
|
√ For law enforcement purposes |
|
Computer Matching and Privacy Protection Act: |
√ For congressional investigations |
|
Act amended the Piracy Act and now codified as a part of the main act, with protections incorporated to ensure the following: |
√ Other administrative purposes |
|
→ procedural uniformity to carry out matching programs |
|
|
→ due process for subjects in order to protect their rights |
|
|
→ oversight of matching programs through the establishment of Data Integrity Boards at each agency engaging in matching to monitor the agency's matching activity |
|
|
Access to Records |
|
|
Mandates that each agency maintaining a system of records have to abide by the following: |
|
|
→ upon request by any individual permit him to review the record and have a copy made of all or any portion thereof in a form comprehensible to him |
|
|
→ permit the individual to request amendment of a record pertaining to him |
|
|
|
|
Violations of the Act
Criminal penalties are imposable up to $5000 for the following misdemeanor charges:
- Disclosure of personally identifiable in a knowing and willing manner by any officer
- Failure to inform that a system of records is being maintained or the details of such system
- Requesting for an individual’s information under false pretenses
The other violations can be of the nature of Refusal of Access to Records. An individual entitled to access his records the individual can file a suit in the civil court for such refusal. Similarly if an individual is denied persistently to amend his record he can file a suit in the civil court for Refusal to Amend Records. General penalties for Civil Violations of the Privacy Act is also imposed.
Sources:
http://en.wikipedia.org/wiki/Privacy_Act_of_1974
http://www.ehow.com/list_6968141_privacy-act-violation-penalties.html
Compliance Trainings
By - Christopher W. Olmsted
On Demand Access Anytime
By - Madhavi Diwanji
On Demand Access Anytime
Compliance Standards
