Source: https://learning.ftlf.com/content/confidentiality-health-centers-toolkit
Timestamp: 2019-07-20 19:48:15
Document Index: 421461087

Matched Legal Cases: ['art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2', 'art 2']

Confidentiality for Health Centers Toolkit | FTLF Learning Center
Home » Confidentiality for Health Centers Toolkit
First issued nearly two decades ago, the HIPAA Privacy Rule requires covered entities, including health centers, to protect patient health information from unauthorized uses and disclosures and to respond to patient requests to access, amend and account for disclosures of their health information. To ensure compliance with the HIPAA Privacy Rule, covered entities must have a HIPAA Privacy Officer and develop written policies and procedures, training and education, reporting and investigation mechanisms, and strategies to mitigate the harmful effects of impermissible uses or disclosures. In 2013, the Office for Civil Rights issued a “Final Rule” that strengthened the privacy and security protections for health information under HIPAA and finalized the Breach Notification Rule. These changes, and the possibility for additional changes soon, have left many health centers wondering how best to ensure they are HIPAA compliant.
In addition, as health centers add or enhance their substance use disorder services, they may also have to comply with the federal substance use disorder confidentiality regulations at 42 CFR Part 2 (“Part 2”). Part 2 is more strict than the HIPAA Privacy Rule, requiring specific patient consent to disclose Part 2 protected records for purposes of treatment, payment and health care operations, unless one of a very limited number of exceptions applies.
FTLF’s Confidentiality for Health Centers Toolkit is designed to help health centers maintain and improve compliance with applicable federal confidentiality and privacy laws and regulations, including the HIPAA Privacy Rule, the HIPAA Breach Notification Rule and Part 2. The Toolkit includes customizable sample policies, procedures, and forms, including:
Privacy Officer Job Description: Sample
Authorization for Disclosure of PHI: Sample Form
Breach Analysis and Notification: Sample Policy and ProcedureBreach Notification to Affected Individuals: Sample Letter
Disclosing PHI to Business Associates: Sample Policy and Procedure
Business Associate Agreement: Sample
With greater attention to enforcement, the time to build or assess and improve your health center’s HIPAA Privacy compliance program is now.
42 CFR Part 2 Documents
Authority and Responsibilities of the Privacy Officer: Sample Policy and Procedure
HIPAA Privacy Education and Training: Sample Policy and Procedure
HIPAA Privacy Education and Training Attendance Certification and Sign In Form: Sample
HIPAA Privacy Education and Training Log: Sample
HIPAA Privacy Education and Training Material Distribution Log: Sample
Safeguards to Protect the Privacy of PHI: Sample Policy and Procedure
4. Privacy Complaints
Reporting and Responding to Privacy Complaints: Sample Policy and Procedure
Prohibition on Waiver of Rights: Sample Policy and Procedure
Privacy Complaint Form: Sample
Privacy Complaint Summary: Sample
Privacy Complaint Log: Sample
Investigating Privacy Complaints: Sample Policy and Procedure
Privacy Investigation Report: Sample
Sanctioning Workforce Members: Sample Policy and Procedure
6. Mitigation of Violations
Mitigating the Effects of a HIPAA Violation: Sample Policy and Procedure
7. Prohibiting Intimidation and Retaliation
Prohibiting Intimidation and Retaliation: Sample Policy and Procedure
Developing, Implementing and Revising HIPAA Policies and Procedures: Sample Policy and Procedure
Documenting HIPAA Privacy Practices: Sample Policy and Procedure
Uses and Disclosures for Treatment, Payment and Health Care Operations: Sample Policy and Procedure
Uses and Disclosures Required by Law: Sample Policy and Procedure
Uses and Disclosures for Public Health Activities: Sample Policy and Procedure
Disclosures about Victims of Abuse, Neglect or Domestic Violence: Sample Policy and Procedure
Uses and Disclosures for Health Oversight Activities: Sample Policy and Procedure
Disclosures for Judicial and Administrative Proceedings: Sample Policy and Procedure
Disclosures for Law Enforcement Purposes: Sample Policy and Procedure
Uses and Disclosures about Decedents: Sample Policy and Procedure
Uses and Disclosures for Cadaveric Organ, Eye, or Tissue Donation Purposes: Sample Policy and Procedure
Uses and Disclosures to Avert a Serious Threat to Health or Safety: Sample Policy and Procedure
Uses and Disclosures for Specialized Government Functions: Sample Policy and Procedure
Disclosures for Workers' Compensation: Sample Policy and Procedure
Authorization for Use and Disclosure of PHI: Sample Policy and Procedure
Revocation of Authorization: Sample Form
Verifying Identity and Authority Prior to Disclosing PHI: Sample Policy and Procedure
Identity Verification: Sample Form
Responding to Patient Requests
Requests for Restrictions: Sample Policy and Procedure
Requests for Restriction: Sample Form
Requests for Confidential Communications: Sample Policy and Procedure
Requests for Confidential Communications: Sample Form
Requests for Access: Sample Policy and Procedure
Requests to Amend: Sample Policy and Procedure
Requests to Amend: Sample Form
Requests for an Accounting of Disclosures: Sample Policy and Procedure
Requests for an Accounting of Disclosures: Sample Form
Designation and Authority of Personal Representatives: Sample Policy and Procedure
Contents of the Notice of Privacy Practices: Sample Policy and Procedure
Providing the Notice of Privacy Practices: Sample Policy and Procedure
Acknowledgement of Receipt of Notice of Privacy Practices: Sample Form
Acknowledgement of Receipt of Notice of Privacy Practices Not Obtained: Sample Form
Minimum Necessary for Use of PHI by Workforce Members: Sample Policy and Procedure
Workforce Access Categories: Sample Form
Workforce Directory Chart: Sample Form
Minimum Necessary for Disclosures and Requests of PHI: Sample Policy and Procedure
Breach Analysis and Notification: Sample Policy and Procedure
Breach Notification to Affected Individuals: Sample Letter
Breach Log: Sample
Breach Notification Report to HHS: Sample Form
Business Associate Agreement Log: Sample Form
Business Associate Agreement Checklist: Sample Form
Board Resolution Designating the Privacy Officer: Sample Form
HIPAA Privacy Compliance Monitoring and Auditing: Sample Policy and Procedure
Cooperating with HHS: Sample Policy and Procedure
Other Privacy Concepts
Uses and Disclosures of Limited Data Sets: Sample Policy and Procedure
Data Use Agreement for Limited Data Sets: Sample
Uses and Disclosures for Fundraising: Sample Policy and Procedure
Workforce Confidentiality Agreement: Sample Form
Site Visitor Confidentiality Agreement: Sample Form
Determining Applicability of 42 CFR Part 2: Sample Policy and Procedure
Determining whether the Health Center Operates a Part 2 Program - Sample Form
Providing Notice to Patients of 42 CFR Part 2 Confidentiality Requirements: Sample Policy and Procedure
Notice to Patients of Federal Confidentiality Requirements under 42 CFR Part 2: Sample Form
Acknowledgment of Receipt of Notice of Federal Confidentiality Requirements under 42 CFR Part 2: Sample Form
Security for Records Protected by 42 CFR Part 2: Sample Policy and Procedure
Request for Access to Records Protected by 42 CFR Part 2: Sample Policy and Procedure
Disclosures to Qualified Service Organizations: Sample Policy and Procedure
Obtaining Patient Consent for Disclosure of Patient Information Protected by 42 CFR Part 2: Sample Policy and Procedure
Initial Consent to Disclose Records from Health Center’s Part 2 Program: Sample Form
Consent to Disclose Records Protected by 42 CFR Part 2: Sample Form
Consent to Disclose Records Protected by 42 CFR Part 2 to a Health Information Exchange: Sample Form
Disclosures for Medical Emergencies: Sample Policy and Procedure
Disclosures for Research: Sample Policy and Procedure
Disclosures for Audits and Evaluations: Sample Policy and Procedure
Court Orders Authorizing Disclosure and Use
Court Orders Authorizing Disclosure and Use: Sample Policy and Procedure
Attorneys from Feldesman Tucker Leifer Fidell LLP provide a full range of counseling services for the development, evaluation, implementation, operation, and support of effective HIPAA Privacy programs, informed by decades of experience advising federally qualified health centers, behavioral health providers, primary care associations, and health-center controlled networks.
DAVID BENDER (Contributor)
We require approval for all Toolkit purchases. We aim to review all requests as quickly as possible, but there are occasional delays. Please allow up to 3-5 business days for approval.
Toolkit subscriptions are for use within your organization only. If you are interested in purchasing Toolkit subscriptions for more than one organization, please Contact Us for bulk pricing options.