Offline Notepad View raw

Shared snapshot

Shared note

Mission of Papaya - Alleviate the stress and anxiety Americans face in paying bills.

No. 1 CAUSE OF STRESS FOR US FAMILIES? Paying bills is a significant part of that stress.

names of founders- Papaya was founded in 2016 by Patrick Kann and Jason Meltzer.

3 Advertised steps- Snap a photo of your bill Confirm your payment method Track your bill status`

Literally pay any bill with Papaya? Convenient, Fast, Secure

3 reasons to say GOODBYE to papaya? Checks and stamps, Complicated portals and passwords, Time wasted on hold, Late and forgotten bills

Can customers really pay any bill with the papaya ? Yes. Literally pay any bill with Papaya (UTILITIES, MEDICAL BILLS, PARKING TICKETS, ANYTHING)

HOW IS IT POSSIBLE THAT PAPAYA CAN PAY ANY BILL? Papaya has developed advanced technology that extracts the information we need from the picture of your bill. We use a variety of techniques to pay your bill. If necessary, we'll even make a phone call or mail a check on your behalf.

WHAT LEVEL OF SECURITY DOES PAPAYA USE? HIPAA COMPLIANCE . Data is securely encrypted and transferred over SSL (Secure Socket Layer) connections that are both PCI (level II) and HIPAA compliant.

DOES PAPAYA SELL OR GIVE CUSTOMER DATA TO THIRD PARTIES? NO. TO PROTECT THEIR INFORMATION. AND PAPAYA HAS a strict policy of never sharing or selling your data with any third parties, except when necessary to complete your bill payments.

LESSON 1

  1. The five titles under HIPAA fall logically into which two major categories? - Administrative Simplification and Insurance Reform

  2. What does PHI stand for? - Protected Health Information

  3. Business Associates - Third Parties that perform services for or exchange data with Covered Entities

Covered Entities -Health Care Providers, Health Plans, Healthcare Clearing House

Privacy Standards- Standards for controlling and safeguarding of PHI in all forms

HIPAA Compliant - Complying with the HIPAA Privacy, HIPAA Security, and HIPAA regulations

Security Standards - Standards for safeguarding of PHI specifically in the electronic form

Omnibus Rule- Name of last update to HIPAA

  1. Which one of the following is a Business Associate? - All of the Above

LESSON 2 Match the following terms under the HIPAA Privacy Standards

Breach - Minimum amount of PHI necessary to accomplish the intended purpose of the use/disclosure

De-Identification - Ensuring that all of the individually identifiable information is deleted

Minimum Necessary Disclosure - Minimum amount of PHI necessary to accomplish the intended purpose of the use/disclosure

LESSON 3 Match the following components of complying with HIPAA Privacy with their descriptions: Compliance Officer- Responsible for implementing and maintaining HIPAA Privacy

Employee Training - An org must train all of its workforce that have access to PHI at a min of every 2 years

Formal Documents and Controls - An org must implement formal documents and controls to protect PHI

LESSON 4 The HIPAA Security Rule is a technology neutral, federally mandated “minimum floor” of protection whose primary purpose is to protect the confidentiality, integrity, and availability of PHI in electronic form when it is stored, maintained, or transmitted

LESSON 5 The general rule is that if a state law is less protective of the individual, then it takes precedence over HIPAA. Conversely, if a state law is more protective of the individual than HIPAA, then HIPAA takes precedence. -True

To find out more about your state’s medical privacy laws and how they interact with HIPAA, you can contact: -Your local county clerk

Under Texas HB 300, any organization conducting business in Texas that owns or licenses computerized data that includes SPI (Sensitive Personal Information) not just PHI must notify Texas residents if their information was breached.

LESSON 6 The Privacy and Security rules specified by HIPAA are reasonable and scalable to account for the nature of each organization’s culture, size, and resources. Each organization will determine its own privacy policies and security practices within the context of the HIPAA requirements and its own capabilities and needs.

-True