{"ref":"GA-HH-PRV-01","title":"HIPAA Privacy and OASIS Confidentiality","category":"Privacy","summary":"Protects the privacy of patients’ health information under the HIPAA Privacy Rule and Georgia’s rule that clinical record information is safeguarded and released only with written consent unless the law authorizes it. Names the Administrator as Privacy Official, sets out when information may be shared, lists patients’ privacy rights and the time frames for each, keeps OASIS data confidential, and requires training, sanctions, and business associate agreements.","inShort":["Patient information is private. Share it only with the care team, the doctor, and people the patient has approved.","Give every new patient our Notice of Privacy Practices and get the acknowledgment signed. Medicare and Medicaid patients also get the OASIS privacy notice.","Speak quietly about care when others are around, and never post about a patient on social media, even without a name.","Send police, lawyers, insurers, and reporters to the office. Do not answer their questions yourself.","Tell the Administrator at once about a misdirected fax, a lost folder, or anything else that went wrong."],"primaryCitation":"45 CFR Part 164 Subpart E","citations":["Ga. Comp. R. & Regs. 111-8-31-.09(f)","O.C.G.A. §31-33-2","O.C.G.A. §30-5-4","O.C.G.A. §19-7-5"],"federalCitations":["45 CFR Part 164 Subpart E","45 CFR §164.520","45 CFR §164.524","45 CFR §164.526","45 CFR §164.528","45 CFR §164.530","45 CFR §164.504(e)","42 CFR §484.40","42 CFR §484.45","42 CFR §484.50(a)(1)(iii)","42 CFR §484.50(c)(6)","42 CFR §484.110"],"surveyorAsks":["Who is your Privacy Official? Show me your Notice of Privacy Practices and where it is posted.","Show me the patient’s signed acknowledgment of the Notice of Privacy Practices and, for a Medicare or Medicaid patient, the OASIS privacy notice."],"forms":[{"ref":"GA-HH-PRV-01-A","title":"Notice of Privacy Practices"}],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR Part 164 Subpart E; Ga. Comp. R. & Regs. 111-8-31-.09(f))","5. OASIS Confidentiality","6. When Patient Information May Be Shared","7. Patient Privacy Rights","8. Procedure","9. Changes to the Notice","10. Responsibilities","11. Records and Compliance Monitoring","12. Staff Training","13. References","14. Related Policies and Forms","15. Approval","16. Revision History"],"version":"1.0","sample":false,"pack":"ga-hha","state":"Georgia","service":"Home health","guides":[{"path":"/guides/home-health-agency-policies/","h1":"What policies and procedures are required for home health agencies?"},{"path":"/guides/home-health-conditions-of-participation/","h1":"Home health Conditions of Participation: which policies each one needs"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}