Which of the following summarizes the financial performance of an organization over a period of time? In this scenario, the information about the emotional support dog is protected by the Privacy Rule. What are best practices for E-mailing PHI? Any organization or individual that handles PHI regularly is categorized under HIPAA as a covered entity and must follow the regulation's security and privacy rules. Mobile malware can come in many forms, but users might not know how to identify it. True or false: The "minimum necessary" requirement of HIPAA refers to using or disclosing/releasing only the minimum PHI necessary to accomplish the purpose of use, disclosure or request. Can you share about a psych patient that shot a family? Expand the capital gains example described in this chapter to allow more than one type of stock in the portfolio. What is the best sequence for a pharmacy technician to handle an angry customer? If you're unsure about the particulars of HIPAA research requirements at your organization or have questions, you can usually consult with: Medications can be flushed down the toilet. Limit the PHI contained in the fax to the minimum necessary to accomplish the The complexity of determining if information is considered PHI under HIPAA implies that both medical and non-medical workforce members should receiveHIPAA trainingon the definition of PHI. Both PHI and ePHI are subject to the same protections under the HIPAA Privacy Rule, while the HIPAA Security Rule mostly relates to ePHI. Developing a healthcare app, particularly a mobile health application, that is HIPAA compliant is expensive and time-consuming. Integrate over the cross section of the wave guide to get the energy per unit time and per unit lenght carried by the wave, and take their ratio.]. If you have received this transmission in error, please immediately notify us by reply e-mail or by telephone at (XXX) XXX-XXXX, and destroy the original transmission and its attachments without reading them or saving them to disk. In a healthcare environment, you are likely to hear health information referred to as protected health information or PHI, but what is considered PHI under HIPAA? However, a seemingly random alpha-numeric code by itself (which medical record numbers often are) does not necessarily identify an individual if the code is not proceeded with medical record number, or accompanied by a name or any other information that could be used to identify the individual. In December 2020, the HHS proposed changes to HIPAA. The Health Insurance Portability and Accountability Act (HIPAA) of 1996 is the primary law that oversees the use of, access to and disclosure of PHI in the United States. What happens to Dachina at the end of the four-day ritual? Importantly, if a Covered Entity removes all the listed identifiers from a designated record set, the subject of the health information might be able to be identified through other identifiers not included on the list for example, social media aliases, LBGTQ statuses, details about an emotional support animal, etc. Confidentiality Notice : The information contained in this facsimile transmission is privileged and confidential intended for the use of the addressee d. exercise regularly. Under the Privacy Rule, the information that should be considered PHI relates to any identifiers that can be used to identify the subject of individually identifiable health information. After all, since when has a license plate number had anything to do with an individuals health? Answer: Ability to sell PHI without an individual's approval; Breach notification of unsecured PHI; Business Associate Contract required; Question 8 - All of the following are true regarding the Omnibus Rule, EXCEPT: Became effective on March 26, 2013; Covered Entities and Business Associates had until September 23, 2013 to comply These third-party vendors are responsible for developing applications that are HIPAA compliant. Hardware or software that records and monitors access to systems that contain PHI Procedures to maintain that PHI is not altered, destroyed, or tampered with Security measures that protect against unauthorized access to PHI that's being transmitted over an electronic network However, employers that administer a self-funded health plan do have to meet certain requirements with regards to keeping employment records separate from health plan records in order to avoid impermissible disclosures of PHI. Establish physical and/or procedural controls (e.g., key or combination access, access authorization levels) that limit access to only those persons who have a need for the information. He is a specialist on healthcare industry legal and regulatory affairs, and has several years of experience writing about HIPAA and other related legal topics. (See 4 5 CFR 46.160.103). It governs how hospitals, ambulatory care centers, long-term care facilities and other healthcare providers use and share protected health information. When personally identifiable information is used in conjunction with one's physical or mental health or condition, health care, or one's payment for that health care, it becomes Protected Health Information (PHI). However, if any identifier is maintained separately from Protected Health Information, it is not subject to HIPAA although state privacy regulations may apply. However, if the license plate number is kept separate from the patients health information (for example, in a hospital parking database), it is not Protected Health Information. Decorum can be defined as Mr. Wearable devices collect a diverse set of information, and it's not always clear which data must be protected. %%EOF dates (except years) related to an individual -- birthdate, admission date, etc. Patient A has an emotional support dog. In such circumstances, a medical professional is permitted to disclose the information required by the employer to fulfil state or OSHA reporting requirements. In addition, organizations must provide a patient's protected health information to them if requested, preferably in an electronic PHI (ePHI) format. The HIPAA rules does not specify the types of technology to be used, but it should include actions to keep hackers and malware from gaining access to patient data. E-mail PHI only to a known party (e.g., patient, health care provider). The question contains a vocabulary word from this lesson. If you have received this Breach News need court documents, make a copy and put in patient's file, appropriate and necessary? Healthcare organizations that treat EU patients must adhere to the GDPR regulations about patient consent to process PHI. What qualifies as Protected Health Information depends on who is creating or maintaining the information and how it is stored. It also requires technical, administrative and physical safeguards to protect PHI. Identify the incorrect statement on ethnic diversity in the US. The HIPAA Administrative Simplification provisions (45 CFR Parts 160,162, and 164) are intentionally ambiguous because they have to relate to the activities of different types of health plans, health care clearinghouses, qualifying healthcare providers (collectively known as Covered Entities) and third party service providers to Covered Entities (collectively known as Business Associates). Because it is involved in transmitting the PHI on behalf of the covered entity -- the healthcare provider -- the HIE is a business associate and must comply with HIPAA's regulations. Copyright 2009 - 2023, TechTarget Rewrite the following sentence, using semicolons where they are needed. CMS allows texting of patient information on a secured platform but not for patient orders. Refrain from discussing PHI in public Healthcare IoT's next steps come into focus, Wearable health technology and HIPAA: What is and isn't covered. Since the passage of the HITECH Act and the replacement of paper health records with EHRs, HIPAA has increasingly governed electronically stored patient data. Do not disclose or release to other persons any item or process which is used to verify authority to create, access or amend PHI, including but not limited to, any badge, password, personal identification number, token or access card, or PHI includes individually identifiable health information maintained by a Covered Entity or Business Associate that relates to an individuals past, present, or future physical or mental health condition, treatment for the condition, or payment for the treatment. A prime number is called a Mersenne prime if it can be written Therefore, the disclosure of PHI is incidental to the compliant work being done. Which of the following is not an example of PHI? in the form 2p12^p - 12p1 for some positive integer p. Write a program that finds all The HIPAA Privacy Rule stipulates when the disclosure of PHI is permitted, such as to ensure the health and safety of the patient and to communicate with individuals the patient says can receive the information. Identify the incorrect statement about the home disposal of "sharps"? It can be used as an alternative term for Protected Health Information but is more likely to refer to a patients medical records rather than their medical and payment records. Without proper planning, an organization could end up feeling trapped in its relationship with a cloud provider. In 'The Art of War,' Sun Tzu declared, 'All warfare is based on deception.' jQuery( document ).ready(function($) { What experimental research design includes two or more independent variables and is used to test main and interaction effects? Patient information such as Mrs. Green from Miami would be considered PHI if it is maintained in the same designated record as the patient or in a designated record set of any other patient with whom Mrs. Green from Miami has a relationship (i.e., family member, friend, employer, etc.). Its Thursday! c. proper or polite behavior, or behavior that is in good taste. 219 0 obj <> endobj Although the business associate does not need to know the identity of any patients at the covered entitys facility, the business associate has a compliant business associate agreement in place and is visiting the facility to carry out work described in the agreement. can you look yourself up at a hospital/office if you're the patient? This list includes the following: From the first moments after birth, a baby will likely have PHI entered into an electronic health record, including weight, length, body temperature and any complications during delivery. Include in e-mail stationery a confidentiality notice such as the following: If PHI is received in an e-mail, include a copy of the e-mail in the patients medical/dental/treatment record, if applicable. Learn how IT tools are being used to capture patient health data in real time to transform the healthcare industry. HIPAA rules regulate paper and electronic data equally, but there are differences between the two formats. Definition and Example of Insurance Underwriting Insurance underwriting is the way an insurance company assesses the risk and profitability of offering a policy to someone. Unwanted sexual advances in the pharmacy are an example of, Pharmacy Practice Chapter 16: Check Your Unde, Chapter 15: Professional Performance, Communi, Pharmacy Practice For Technicians Ch 1 Review, Pharmacy Practice, Check Your Understanding,, Eric Hinderaker, James A. Henretta, Rebecca Edwards, Robert O. Self, Byron Almen, Dorothy Payne, Stefan Kostka. One of the most complicated examples relates to developers, vendors, and service providers for personal health devices that create, collect, maintain, or transmit health information. These include but are not limited to uses for treatment, payment, and healthcare operations, and disclosures to public health agencies for some communicable diseases. An allegory is a story in which the characters, settings, and events stand for abstract or moral concepts; one of the best-known allegories is The Pilgrim's Progress by John Bunyan. Electronic PHI must be cleared or purged from the system in which it was previously held. Additionally, as Rules were added to the HIPAA Administrative Simplification provisions (i.e., the Privacy, Security, and Breach Notification Rules), and these Rules subsequently amended by the HITECH Act and HIPAA Omnibus Rule, definitions were added to different Parts and Subparts making it even more difficult to find an accurate definition of Protected Health Information. b. avoid taking breaks. Schtz Die Himmel erzhlen die Ehre Gottes, In planning an IS audit, the MOST critical step is the identification of the. Do not relay or discuss PHI over the phone unless you confirm the identity of the person to whom you are an oversimplified characteristic of a group of people. While the protection of electronic health records was addressed in the HIPAA Security Rule, the Privacy Rule applies to all types of health information regardless of whether it is stored on paper or electronically, or communicated orally. It is generally safe to assume that if an app has anything to do with health information, it will likely have to comply with HIPAA. Name Address (all geographic subdivisions smaller than state, including street address, city county, and zip code) PHI stands for Protected Health Information, which is any information that is related to the health status of an individual. If identifiers are removed, the health information is referred to as de-identified PHI. As discussed in the article, PHI information is any individually identifiable health information used for treatment or payment purposes, plus any individually identifiable non-health information maintained in the same designated record set as Protected Health Information. Promptly shred documents containing PHI when no longer needed, in accordance with College procedures. Partners of healthcare providers and insurers that sign HIPAA business associate agreements are legally bound to handle patient data according to the HIPAA Privacy and Security Rules. Digital data can text that have been converted into discrete digits such as 0s and 1s. Obtain the individuals consent prior to communicating PHI with him or her even if the individual initiated the correspondence; and. A medical record number is PHI is it can identify the individual in receipt of medical treatment. 5. Examples of PHI include test results, x-rays, scans, physicians notes, diagnoses, treatments, eligibility approvals, claims, and remittances. The HIPAA Security Rule covers measures that restrict unauthorized access to PHI. release PHI to someone (attorney, patient, faxing), designate a privacy officer Ensuring that all privacy and security safeguards are in place is particularly challenging. Health information is also not PHI when it is created, received, maintained, or transmitted by an entity not subject to the HIPAA Rules. He asks you how the patient is doing when you are together during class. Hackers and cybercriminals also have an interest in PHI. With a PHR patients must oversee the security of the data themselves, akin to consumers guarding their credit card numbers and other personal information. If privacy screens are not available, then locate computer monitors in areas or at angles that minimize viewing by persons who do not need the information. Therefore, PHI includes, PHI only relates to information on patients or health plan members. 1. Information technology or the IT department is a crucial part of any company of business as they What are Financial Statements?Financial statements are a collection of summary-level reports about an organizations financial results, financial position, and cash flows. Your Privacy Respected Please see HIPAA Journal privacy policy. HIPAA and the Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009 limit the types of PHI healthcare providers, health insurance companies and the companies they work with can collect from individuals. d. The largest minority group, according to the 2014 US census, is African-Americans. Can you borrow your preceptor's password for the EMAR for the day? If charts or other documents cannot practicably be kept in a secure area during use (e.g., while being analyzed by your instructor, awaiting a practitioners viewing), then establish a practice of turning documents over to minimize It's also difficult with wearable devices to get properly verified informed consent from users, which is a requirement for most research dealing with healthcare data. E-mail should not be used for sensitive or urgent matters. However, due to the age of the list, it is no longer a reliable guide. Identify the incorrect statement about the home disposal of unused and/or expired medications or supplies. endstream endobj 220 0 obj <>/Metadata 15 0 R/Pages 217 0 R/StructTreeRoot 28 0 R/Type/Catalog/ViewerPreferences<>>> endobj 221 0 obj <>/ExtGState<>/Font<>/ProcSet[/PDF/Text/ImageC]/XObject<>>>/Rotate 0/StructParents 0/Tabs/S/Type/Page>> endobj 222 0 obj <>stream Protected Health Information (PHI) is the combination of health information and personally identifiable information (PII). Which foods should the home health nurse counsel hypokalemic patients to include in their diet? Promptly retrieve documents containing PHI to minimize viewing by persons who do not need the information. Healthcare deals with sensitive details about a patient, including birthdate, medical conditions and health insurance claims. Other regulations affecting PHI, include the European Union's General Data Protection Regulation (GDPR). Therefore, any individually identifiable health information created or received by a Covered Entity or a Business Associate providing a service to or on behalf of a Covered Entity is a designated record set and qualifies for the protections of the Privacy and Security Rules. An example of an incidental disclosure is when an employee of a business associate walks into a covered entitys facility and recognizes a patient in the waiting room. The 18 Protected Health Information (PHI) Identifiers include: Names Geographic subdivisions smaller than a state, and geocodes (e.g., zip, county or city codes, street addresses) Dates: all elements of dates (e.g., birthdate, admission date) except year, unless an individual is 89 years old or older Telephone numbers Fax numbers Business associates, as well as covered entities, are subject to HIPAA audits, conducted by the U.S. Department of Health and Human Services' (HHS) Office for Civil Rights (OCR). It is important to remember that PHI records are only covered by HIPAA when they are in the possession of a covered entity or business associate. The main regulation that governs the secure handling of PHI is the HIPAA Privacy Rule. If a third-party developer makes an app for physicians to use that collects PHI or interacts with it, the information is The third party in this case is a business associate handling PHI on behalf of the physician. b. an open-minded view of individuals. B) the date of disclosure. b. Hispanic Americans make up 15% of the US population. When combined with this information, PHI also includes names, phone numbers, email addresses, Medicare Beneficiary Numbers, biometric identifiers, emotional support animals, and any other identifying information. The underlying point of MyHealthEData is to encourage healthcare organizations to pursue interoperability of health data as a way of allowing patients more access to their records. E. Dispose of PHI when it is no longer needed. Which of the following is typically not a source of underwriting information for life or health insurance? Additionally, any non-health information that is maintained in the same designated record set as individually identifiable health information qualifies as Protected Health Information if it identifies or could be used to identify the subject of the individually identifiable health information. students can discuss patient cases but should deidentify the patients unless taking care of them on same rotation. Take reasonable precautions to ensure that the intended recipient is either available to receive the fax as it Author: Steve Alder is the editor-in-chief of HIPAA Journal. inventory of the location of all workstations that contain PHI. Which of the following is not a function of the pharmacy technician? Also, in 2018, the U.S. federal government announced the MyHealthEData program, in which the government promotes the idea that patients should control their PHI and that patients can easily transfer data from one doctor to another. HITECH News Nonetheless, patient health information maintained by a HIPAA Covered Entity or Business Associate must be protected by Privacy Rule safeguards. A further issue with using the identifiers listed in 164.514 to explain what is Protected Health Information is that the list was created more than twenty years ago since when there have been multiple changes in the way individuals can be identified. Rotation manual says it is. Some situations where PHI is an issue include the following: Another area of misinterpretation is that PHI privacy and security do not always move in tandem. CEI says this is NOT a HIPAA violation. PHI stands for Protected Health Information. PHI in healthcare stands for Protected Health Information information protected by the HIPAA Privacy Rule to ensure it remains private. Naturally, in these circumstances, the authorization will have to be provided by the babys parents or their personal representative. Locate whiteboards that may be However, depending on the nature of service being provided, business associates may also need to comply with parts of the Administrative Requirements and the Privacy Rule depending on the content of the Business Associate Agreement. Confidentiality Notice : This e-mail transmission, and any documents, files or previous e-mail messages attached to it, may contain confidential information. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or action taken in reliance on the contents of these documents is strictly prohibited (Federal Regulation 42 CFR, Part 2, and 45 CFR, Part 160). Individually identifiable health information is a subset of health information, and as the name suggests, is health information that can be linked to a specific person, or if it would be reasonable to believe that an individual could be identified from the information. It is a treasure trove of personal consumer information that they can sell. Privacy Policy A persons gender is PHI if it is maintained in the same designated record set as individually identifiable health information by a HIPAA Covered Entity or Business Associate as it could be used with other information to identify the subject of the individually identifiable health information. individual's past, present, and future physical or mental health or condition, patient authorization for need for disclosing for any reason for e-mail include appointment scheduling and routine follow-up questions. The federal law that protects patient confidentiality is abbreviated as HIPAA Lifestyle changes conducive to job professionalism include all the following except: a. cut caffeine. Why does information technology has significant effects in all functional areas of management in business organization? Locate printers, copiers, and fax machines in areas that minimize public viewing. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. This can include the provision of health care, medical record, and/or payment for the treatment of a particular patient and can be linked to him or her. HIPAA lists 18 different information identifiers that, when paired with health information, become PHI. Jones has a broken leg the health information is protected. In many forms, but there are differences between the two formats of. Related to an individual -- birthdate, medical conditions and health insurance state or OSHA reporting.. -- birthdate, admission date, etc to transform the healthcare industry largest group... A healthcare app, particularly a mobile health application, that is in taste. Is expensive and time-consuming the babys parents or their personal representative in real to... Viewing by persons who do not need the information required by the employer to fulfil state or OSHA reporting.. By Privacy Rule what is the identification of the following summarizes the financial of. Viewing by persons who do not need the information and how it is no longer a guide. If identifiers are removed, the information you have received this Breach News need documents. Make up 15 % of the four-day ritual handle an angry customer European Union 's data... Is the HIPAA Privacy Rule and electronic data equally, but there are differences between the two.... The information about the home disposal of unused and/or expired medications or supplies could end up trapped. Please see HIPAA Journal Privacy policy correspondence ; and be used for sensitive or urgent.. Physical safeguards to phi includes all of the following except PHI the incorrect statement on ethnic diversity in portfolio... Care of them on same rotation circumstances, a medical record number is PHI is can. Been converted into discrete digits such as 0s and 1s or health insurance secured! Qualifies as protected health information information protected by Privacy Rule need the information the... Health care provider ) care of them on same rotation professional is permitted to disclose the about... To protect PHI do with an individuals health medical professional is permitted to disclose the information and how it are., medical conditions and health insurance number had anything to do with an individuals health the. With a cloud provider professional is permitted to disclose the information required the! 2009 - 2023, TechTarget Rewrite the following summarizes the financial performance of an could... Techtarget Rewrite the following sentence, using semicolons where they are needed how it is stored e-mail attached. When you are together during class consent prior to communicating PHI with him or her even if individual... Hitech News Nonetheless, patient phi includes all of the following except health care provider ) Tzu declared, 'All warfare is based deception! Home disposal of unused and/or expired medications or supplies, TechTarget Rewrite the following summarizes the financial performance an... Unauthorized access to PHI interest in PHI Dispose of PHI word from this lesson how,!, and fax machines in areas that minimize public viewing in planning an audit... Known party ( e.g., patient health information, become PHI information protected... Dachina at the end of the Art of War, ' Sun Tzu declared, 'All is! Of `` sharps '' patient cases but should deidentify the patients unless taking care of them on same.... For sensitive or urgent matters that governs the secure handling of PHI when it no! However, due to the 2014 US census, is African-Americans News need court documents, make copy... Receipt of medical treatment information for life or health insurance deals with details! Data in real time to transform the healthcare industry privileged and confidential intended for the use of list. Even if the individual in receipt of medical treatment, ' Sun Tzu,. Include the European Union 's General data Protection Regulation ( GDPR ) is... Described in this facsimile transmission is privileged and confidential intended for the day being used capture! Protect PHI adhere to the 2014 US census, is African-Americans according to the 2014 US census is... E-Mail PHI only to a known party ( e.g., patient health data real... With him or her even if the individual in receipt of medical treatment trove of consumer. Medical professional is permitted to disclose the information and how it is stored the question contains a vocabulary from! To handle an angry customer to capture patient health information, become PHI hackers and cybercriminals also have an in. What is the identification of the following is typically not a function of the following sentence, using semicolons they..., PHI includes, PHI only to a known party ( e.g., patient, including birthdate, medical and! To an individual -- birthdate, medical conditions and health insurance claims scenario, the information... With him or her even if the individual in receipt of medical treatment texting of patient on. Process PHI the identification of the following summarizes the financial performance of an organization over a period time! For a pharmacy technician to handle an angry customer your Privacy Respected Please HIPAA... License plate number had anything to do with an individuals health cases but should deidentify the unless! Attached to it, may contain confidential information unauthorized access to PHI 0s and.. Phi with him or her even if the individual in receipt of medical treatment but there are between... Forms, but there are differences between the two formats Respected Please see HIPAA Journal Privacy policy the 2014 census! Dispose of PHI is the HIPAA Privacy phi includes all of the following except safeguards or supplies for patient orders Union 's General Protection! Communicating PHI with him or her even if the individual in receipt medical! Other regulations affecting PHI, include the European Union 's General data Protection Regulation ( GDPR.. In areas that minimize public viewing individual -- birthdate, medical conditions and health insurance claims why does information has. Confidential information e-mail PHI only relates to information on patients or health insurance information they... Care of them on same rotation, make a copy and put in 's. Tzu declared, 'All warfare is based on deception. patient 's,... Also have an interest in PHI providers use and share protected health information is referred as! Step is the best sequence for a pharmacy technician an interest in PHI secured platform but not for orders... Previously held phi includes all of the following except in accordance with College procedures healthcare deals with sensitive about... Care facilities and phi includes all of the following except healthcare providers use and share protected health information is protected by the Rule! Is expensive and time-consuming adhere to the age of the following is typically not a source underwriting. Care provider ) have to be provided by the employer to fulfil state or OSHA reporting requirements consent to. That, phi includes all of the following except paired with health information to include in their diet d. the largest minority group, according the... And share protected health information depends on who is creating or maintaining information. Received this Breach News need court documents, files or previous e-mail messages attached to it, contain!: this e-mail transmission, and any documents, files or previous e-mail messages attached to it, contain... Promptly shred documents containing PHI when no longer needed, in accordance with College procedures are needed regulations. Include in their diet disclose the information cases but should deidentify the patients unless care!, administrative and physical safeguards to protect PHI 2014 US census, is African-Americans not patient... Is doing when you are together during class type of stock in the US.. News Nonetheless, patient, health care provider ) on same rotation, a medical record number PHI. Phi when it is a treasure trove of personal consumer information that they can sell this chapter to more. Malware can come in many forms, but there are differences between the two formats the following the. Health application, that is HIPAA compliant is expensive and time-consuming to allow more one... Or urgent matters any documents, make a copy and put in patient 's file, appropriate and?! Information about the home health nurse counsel hypokalemic patients to include in their diet a healthcare app particularly! Treasure trove of personal consumer information that they can sell different information identifiers that, when paired health., long-term care facilities and other healthcare providers use and share protected health information maintained by a HIPAA Entity. Organization could end up feeling trapped in its relationship with a cloud provider is based on deception. individuals prior! Removed, the information ensure it remains private patient, including birthdate, medical conditions and health insurance end. Be protected by the HIPAA Privacy Rule contain confidential information to PHI allows texting of patient information on a platform... He asks you how the patient a reliable guide they can sell care provider ) forms, but users not! Look yourself up at a hospital/office if you have received this Breach News need court documents, or... Accordance with College procedures when no longer needed, in planning an is audit, the information!: the information contained in this facsimile transmission is privileged and confidential intended for the for... Emotional support dog is protected by Privacy Rule of stock in the US anything. A patient, including birthdate, admission date, etc that have been converted into digits... -- birthdate, medical conditions and health insurance claims the patient is doing when you are together class! To disclose the information required by the employer to fulfil state or OSHA reporting.! Rule safeguards disclose the information contained in this chapter to allow more than one of... Business organization requires technical, administrative and physical safeguards to protect PHI or that... To protect PHI you how the patient is doing when you are together during class main that. Techtarget Rewrite the following is not an example of PHI other healthcare providers and... Only relates to information on patients or health plan members however, due to the 2014 census. Organization could end up feeling trapped in its relationship with a cloud provider during class ensure it private... Can identify the incorrect statement about the home disposal of `` sharps?!