Source: https://centernet.okstate.edu/hipaa/privacyprocedures0.php
Timestamp: 2017-11-22 23:46:13
Document Index: 634208653

Matched Legal Cases: ['§164', '§164', '§164', '§164', '§164', '§164', '§164', '§164', '§164', '§164', '§164', '§164', '§164', '§160', '§160', '§160', '§160', '§162', '§164', '§164', '§164', '§164', '§164']

﻿ OSU-CHS Centernet - Privacy Policies & Procedures - Section 0
Section 0 - Applicability and Definitions
Title: Applicability-Privacy Rule
Policy: PRV-00.00
HIPAA Section: 164.500(a)
Standard: Applicability Responsibility: Health Care Components
To identify how the HIPAA Privacy Rule applies to OSU.
(a) Except as otherwise provided herein, the standards, requirements, and implementation specifications of this subpart (Privacy Rule) apply to covered entities with respect to protected health information. §164.500(a)
(b) Health care clearinghouses must comply with the standards, requirements, and implementation specifications as follows: §164.500(b)
(1) When a health care clearinghouse creates or receives protected health information as a business associate of another covered entity, the clearinghouse must comply with: §164.500(b)(1)
(i) Section 164.500 relating to applicability; §164.500(b)(1)(i)
(ii) Section 164.501 relating to definitions; §164.500(b)(1)(ii)
(iii) Section 164.502 relating to uses and disclosures of protected health information, except that a clearinghouse is prohibited from using or disclosing protected health information other than as permitted in the business associate contract under which it created or received the protected health information; §164.500(b)(1)(iii)
(iv) Section 164.504 relating to the organizational requirements for covered entities; §164.500(b)(1)(iv)
(v) Section 164.512 relating to uses and disclosures for which individual authorization or an opportunity to agree or object is not required, except that a clearinghouse is prohibited from using or disclosing protected health information other than as permitted in the business associate contract under which it created or received the protected health information; §164.500(b)(1)(v)
(vi) Section 164.532 relating to transition requirements; and §164.500(b)(1)(vi)
(vii) Section 164.534 relating to compliance dates for initial implementation of the privacy standards. §164.500(b)(1)(vii)
(2) When a health care clearinghouse creates or receives protected health information other than as a business associate of a covered entity, the clearinghouse must comply with all of the standards, requirements, and implementation specifications of the Privacy Rule. §164.500(b)(2)
(c) Where provided, the standards, requirements, and implementation specifications adopted under this Privacy Rule apply to a business associate with respect to the protected health information of a covered entity. §164.500(C)
(d) The standards, requirements, and implementation specifications of the Privacy Rule do not apply to the Department of Defense or to any other federal agency, or non-governmental organization acting on its behalf, when providing health care to overseas foreign national beneficiaries. §164.500(d)
OSU will adhere to all applicable rules and regulations under the Privacy Rule. OSU does operate a Clearinghouse and as such will also adhere to these standards.
OSU will keep on file a copy of all Business Associate Agreements for our Clearinghouse Function.
Policy: PRV-00.01
HIPAA Section: 164.501; 160.103
Standard: Definitions Responsibility: Health Care Components
To provide definitions used in HIPAA and within OSU Policies and Procedures
Provide definitions of terminology used in relation to the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and in relation to the Health Information Technology for Economic and Clinical Health Act (HITECH).
OSU adopts all definitions of terminology in the various sections and subparts of HIPAA and HITECH including but not limited to:
HIPAA SECTIONS: §160.103; §160.202; §160.401; §160.502; §162.103; §164.103; §164.304; §164.402; §164.501; §164.504(a);
HITECH SECTION: 3000 (Starting on Page 3)
In the event definitions change, OSU will use the definitions only in their respective effective periods. In the event a term or terms have been left off this list, it is inadvertent and will be considered human error. OSU adopts all legal definitions of all HIPAA terms.
The definitions found in the various sections include:
Administrative Simplification Provision
Covered Health Care Provider
Subhealth Plan
Plan Administration Functions
BRE-01.00 Policy
Section 0 Privacy Policies
00.00 - Applicability-Privacy Rule
00.01 - Definitions