The Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires that Kentucky Primary Care Alliance and its associates under Title II, Subtitle F, comply with standards for the electronic exchange of healthcare data; medical and administrative codes that should be used within those standards and measures for the protection of security and privacy of individually identifiable healthcare information.

Access to protected health information must be granted to each associate based on the assigned job functions of the associate. Access privileges should not exceed those necessary to accomplish the assigned job function.

All disclosures of protected health information must be limited to the minimum amount of information needed to accomplish the purpose of the disclosure. All requests for protected health information must be limited to the minimum amount of information needed to accomplish the purpose of the request.

Kentucky Primary Care Alliance provides each associate with training to maintain its compliance with Federal and State Laws.