{"ref":"FL-HSP-PRV-01","title":"HIPAA Privacy and Florida Confidentiality Laws","category":"Privacy","summary":"Explains how the Agency protects patient information under the HIPAA Privacy Rule and the stricter Florida rules: the hospice record release limits in s. 400.611, F.S., the HIV test result rules in s. 381.004, F.S., and 42 CFR Part 2 for substance use disorder records received from treatment programs. It covers the Notice of Privacy Practices, the patient’s HIPAA rights, minimum necessary, family involvement, business associates, privacy complaints and sanctions.","inShort":["Use patient information only to care for the patient, to bill, or to run the hospice. Look only at records you need for your job.","Talk about care with the family members the patient has named. Copies of the record go only through Lee Sample.","Never share a patient’s HIV status unless the patient gave specific written permission.","No patient photos or posts on social media, and no patient details in ordinary text messages.","Give every new patient the Notice of Privacy Practices and get the acknowledgment signed.","Report any privacy mistake to Lee Sample the same day."],"primaryCitation":"45 CFR Part 164 Subpart E","citations":["s. 400.611(3)-(5), F.S.","s. 381.004(2)(e)-(f), F.S.","s. 408.051(3)-(4), F.S.","s. 415.1034, F.S.","s. 39.201, F.S.","s. 408.811(3), F.S.","s. 381.026(4)(b)6., F.S."],"federalCitations":["45 CFR Part 164 Subpart E","45 CFR §160.203","45 CFR §164.502","45 CFR §164.506","45 CFR §164.508","45 CFR §164.510","45 CFR §164.512","45 CFR §164.514(d)","45 CFR §164.520","45 CFR §164.522","45 CFR §164.524","45 CFR §164.526","45 CFR §164.528","45 CFR §164.530","42 CFR Part 2","42 CFR §418.52(c)(5)"],"surveyorAsks":["Who is your privacy official, and how do patients reach that person?","Show me how you give the Notice of Privacy Practices and record the patient’s acknowledgment."],"forms":[{"ref":"FL-HSP-PRV-01-A","title":"Notice of Privacy Practices Acknowledgment"}],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR Part 164 Subpart E; s. 400.611(3)-(4), F.S.)","5. When Information May Be Used or Shared","6. Family, Caregivers and Others Involved in Care","6.1 HIV test results","6.2 Substance use disorder records from treatment programs","7. Notice of Privacy Practices","8. Patient Privacy Rights","9. Everyday Privacy Rules for Staff","10. Business Associates","11. Privacy Complaints, Sanctions and Mitigation","12. Responsibilities","13. Records and Compliance Monitoring","14. Staff Training","15. References","16. Related Policies and Forms","17. Approval","18. Revision History"],"version":"1.0","sample":false,"pack":"fl-hospice","state":"Florida","service":"Hospice","guides":[{"path":"/guides/hospice-policies/","h1":"What policies are required for hospice?"},{"path":"/guides/hospice-conditions-of-participation/","h1":"Hospice Conditions of Participation: which policies each one needs"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}