Sign Minnesota Terms of Use Agreement Secure

Document type sign terms of use agreement minnesota secure

welcome to the Washington Health Benefit exchanges 2019 healthplanfinder security training you may be joining us for one of two reasons many of you are here to complete your mandatory annual security refresher training to continue your volunteer access and healthplanfinder others are taking this training as part of the 7 and final training module in becoming a volunteer sister to receive access to assist individuals with applying and renewing their Apple health coverage in the Washington healthplanfinder web portal at www.a healthplanfinder Iorg at the end of today's lesson will share the final steps in how to become a volunteer a sister with access to Washington Health Plan Finder as we discussed in the previous modules community partners with healthplanfinder Access have a number of benefits available to them to assist individuals and families with apple health coverage to apply for access community partners must be affiliated with an organization we'll talk more about this towards the end of today's presentation the purpose of this training is to provide you with an annual overview of security and privacy practices to prepare a baseline of security awareness for working with the Washington health benefit exchanges healthplanfinder web portal and to a Crees user awareness and improve user behavior we'll also learn the consequences of a privacy violation and how you can assure in your daily practice that personal data will be used and viewed for business purposes only today we'll focus on bullet three of this slide to establish compliance with Centers for Medicare and Medicaid Services and the Internal Revenue Services what is personal identifiable information or PII it is any single piece of information that can be used to identify an individual example of this include name date of birth Social Security numbers addresses and contact information the exchange limits user access to only authorized users and to those who have a need to know do not share client PII with others limit access and disclosure to authorized users when in doubt contact your supervisor HCA volunteers sister point of contact or the Washington Health Benefit Exchange security team who is responsible for protecting personal information everyone who becomes a volunteer sister with access and healthplanfinder and users of information technology systems is equally responsible for security and privacy you are responsible for the information you handle every day it's everyone's responsibility to keep our systems and information secure no one is exempt there are a lot of pieces of information collected and processed through the Washington healthplanfinder this slide shows a snapshot of the information you are responsible for for one individual and all of the avenues the information either comes from or is sent through please take a moment to read through them press pause if necessary when dealing with this information and these sources it is extremely important to practice safeguarding methods which we'll talk about momentarily avoid sending PII but if necessary encrypted you will need to engage your own IT resource for assistance with an encryption process that works with your email system this is a copy of the user access agreement form you have either already signed this form or will sign after you complete the required training to obtain user access in the healthplanfinder please press pause if necessary to read the full agreement on this slide and the next today we're focusing on numbers 1 2 5 and 7 which is located on the next slide number 1 States I will only create collect use or disclose confidential personal and financial information to the extent it is necessary to carry out my authorized role with the exchange and for no other purpose number 2 States I will disclose confidential personal and financial information only to individuals who are authorized to receive or view it if I receive any requests for information from an unauthorized person or uncertain entity I will promptly refer the request to the navigator broker team at the exchange to my supervisor and/or lead organization number five states I will immediately report any unauthorized access or disclose of confidential personal and financial data I will report any breach to the healthplanfinder broker navigator team my supervisor and/or lead organization please note the states you will have to notify the broker navigator team but since you are a volunteer sister you will want to report any breach to your HCA volunteers sister point of contact and supervisor as well as the HPE security team number seven of the user access agreement states I will comply with all policies and procedures of the exchange regarding privacy and security of confidential and personal information in accordance with 45 CFR 150 5.2 6-0 I understand that any violations of the non-disclosure of confidential and personal information requirements may subject me to civil fines up to $25,000 per use of disclosure what actions can you complete within your authorized roll with healthplanfinder data if you find yourself in a situation outlined in number four please report it to your supervisor each see a volunteer a sister point of contact and the security team at the exchange at security at wuah be exchanged Oh our Jie unauthorized disclosure of PII has several possible consequences including employee discipline or termination large fines up to $25,000 per person or entity and even criminal charges in some cases an incident means the act of violating a security policy examples include accidentally sending an email or a report containing PII to a person not authorized to view it or sending it in an unprotected manner allowing an unauthorized person to use your computer or login to access PII discussing work-related information in a public area or on a social media site accessing the private records of friends neighbors celebrities or any other person when not authorized to do so and also any security situation that could compromise PII such as virus or email phishing scams a breach happens when there is a loss of control an incident becomes a breach when there is the loss of control compromised unauthorized disclosure an authorized acquisition unauthorized access or any similar term referring to situations where persons other than authorized users have access or potential access to personally identifiable information or protected health information whether physical or electronic a good example of a breach happened in the state of Minnesota in September 2013 prior to go live when an employee attached an Excel workbook to the wrong email distribution list and lost control of broker data including broker license numbers names and addresses if you become aware of an incident contact your supervisor HCA volunteers sister point of contact and the health benefit exchange IT security immediately the health benefit exchange security team has one hour to notify the center for medicare and medicaid services once the exchange knows of a security incident please do not investigate the incident on your own immediately report suspected incidents that could compromise PII in any format whether it be electronic paper or oral communications incidents most often occur from loss damage theft or improper disposal of PII report incidents as indicated on this slide now we'll go over how to prevent an incident take precautions for preventing incidents from happening remember what you see here and know is confidential only discuss confidential information with personnel on a need-to-know basis use your shredder bins at work to discard confidential information lock your computers when you step away from your desk even if it's for a few seconds discard post-it notes and scrap paper you use to write down confidential information follow these guidelines in any security measures you have in your place of work at all times this slide is a quick recap of Washington Health Benefit Exchange privacy policy highlights and shows where you can locate the Washington health benefit exchanges privacy policy from the healthplanfinder website please do not discuss any PII on social media sites whether they are owned by your organization or by the Health Benefit Exchange here are some security tips for you to keep in mind in your daily work use a secure network drive that can store your files if you can instead of storing information on your computer where it can be easily accessed if someone steals or has unauthorized access to it do not share your passwords with anyone not even your supervisor and don't write them down anywhere especially on a sticky note next to your computer keep your desk clean by discarding all notes you take during the day that might have PII on them please don't discuss any PII on social media sites even if they are owned by your organization or the Health Benefit Exchange last but not least erase any confidential information on whiteboards and clean up meeting rooms after you are done what is the purpose of this training to comply with CMS protecting PII security and privacy awareness who is the wink Asst link in any security program anyone who is responsible for the security at Washington Health Benefit Exchange everybody is what information is critical for us to protect all information we receive particularly PII personal health information personal care information and financial tax information where should you store electronic Washington health benefit exchange information network drives onedrive with whom can you share critical health benefit exchange information with only people that need to know with whom can you share your password with no one who would you contact if there is a security incident to report your HC a point of contact at HC a volunteer sister @ HC AWA govt so finally for those applying to receive a Health Care authority Community Partner volunteers sister access and healthplanfinder you must complete all seven modules of the community-based training be affiliated with an organization request a training assessment test at HCA volunteers sister at HCA W a govt and complete and return the tests to the same email address once healthcare Authority determines successful completion of the test HCA will email the volunteer access registration packet including a community partner registration form Washington State Patrol background check and Washington health benefit exchange User Agreement once approved HCA will notify you via email you will then be granted access and a Health Plan Finder and sent a personal username and password as a reminder your Washington healthplanfinder account will be disabled if there has been no activity for a hundred and eighty days and also passwords and healthplanfinder expire every sixty days for more resources and training materials regarding Apple Health Medicaid and the use of Health Plan Finder please visit the Health Care authority training and education webpage at the link shown on this slide for community partners Health Care authority has made available a team of eligibility policy representatives to provide assistance for questions regarding Medicaid eligibility and assistance with Washington Apple health applications in healthplanfinder these representatives serve specific counties for more information about the washington health benefit exchange you can visit their site at www.hsn congratulations you have completed the annual requirement for health benefit exchanges health and finder security training if you are applying to become an HCA volunteers sister please contact HCA HCA volunteers sister at HCA W a govt to receive the final steps needed to obtain access and healthplanfinder