HIPAA POLICIES

 

The following policies are in Microsoft Word format and can be downloaded to your hard drive by  “right-mouse clicking” on the file link and then choosing “saving target as” or selecting the save option in the dialogue box that appears.

 

TABLE OF CONTENTS

 

• ETSU Operating Policy Statement
• Development and Administration of Policies and Procedures

 

• Notice of Privacy Rights
• Acknowledgement of Receipt of Notice of Privacy Practices
• ETSU Notice of Privacy Practices

 

• General Rules on Uses and Disclosures of PHI
• Authorization for Release of PHI; Revocation of Authorization for Release of PHI
• Minimum Necessary Use, Disclosure, Request

·     Chart (html format)

 

• Uses & Disclosures for Treatment, Payment, and Health Care Operations
• Uses & Disclosures of Psychotherapy Notes
• Uses & Disclosures of PHI for Marketing
• Uses & Disclosures of PHI Requiring an Opportunity to Agree or Object
• Uses & Disclosures of PHI for Public Health and Safety
• Uses & Disclosures of PHI for Health Oversight Reporting
• Uses & Disclosures of PHI for Judicial & Administrative Proceedings
• Uses & Disclosures of PHI About Decedents
• Uses & Disclosures of PHI for Research
• Limited Data Sets
• De-identification and Re-identification of PHI
• Uses & Disclosures of PHI for Specialized Government Functions
• Uses & Disclosures of PHI for Workers Compensation
• Uses & Disclosures of PHI for Fundraising

 

• Requests for Restricting Uses and Disclosures of PHI/Requests for Confidential Communications of PHI
• Right to Access, Inspect and Copy PHI
• Right to Request Amendment of PHI
• Accounting of Disclosures of PHI

 

• Business Associate Agreements
• Personal Representatives

 

• Facility Security Plan
• Identity Verification
• Safeguarding PHI in Health Information Systems
• Retention of Documentation/Permanent Disposal & Destruction of Documentation

 

• Privacy-Related Complaints and Investigations
• Sanctions for Violation of Privacy Policy or Procedure
• Non-Retaliation

 

• Internal Audit of Compliance with Privacy Policies and Procedures
• Training

 

• Appointment Reminders and Recalls
• Appointment Scheduling
• Confidentiality of Information
• Patient Check-in
• Patient Check-out
• Patient Registration
• Telefacsimile
• Transcription of Health Information
• Sales / Drug Representatives

 

• Data Back-up Plan
• Disaster Plan
• Electronic Communications
• Laboratory Information Systems Electronic Signature
• Internet / Network Resources
• Wireless Communications
• Workstations, Palms with PHI, Tablet PCs
• Security Breach Reporting Procedure
• Security Level Designations