HIPAA Policies

• Attachment 29: Policy on Privacy of Individually Identifiable Health Information
• HIPAA Definitions
• Access, Uses & Disclosures of PHI
• Accounting of Disclosures of PHI
• Breach Notification Policy
• Patient’s Request to Amend their PHI
• Disclosures of PHI for Administrative & Judicial Purposes
• Disclosure of De-identified PHI
• Disclosure of PHI through the Facility Directory
• Disclosures of PHI to the Food & Drug Administration (FDA)
• Disclosure of PHI through Fundraising Activities
• Disclosure of PHI to be used in Health Oversight Activities
• Use and Disclosure of PHI for Specialized Government Functions
• Minimum Necessary Uses and Disclosures of PHI
• Reporting Incidents to Law Enforcement Agency
• Reporting of Suspected Abuse against a Vulnerable Adult &/or Elderly Adult, Including Neglect Indicators
• Reporting of Suspected Child Abuse, Neglect
• Requests by Individuals for Confidential Communications of His/Her PHI
• Request for Restrictions on Uses and Disclosures of PHI
• Policy on HIPAA Compliant Research
• Securing Work Areas to Prevent Unauthorized Use or Disclosure of PHI
• Attachment 2: Policy on Sanctions for Plan Violations