{"ref":"GA-HSP-PRV-02","title":"HIPAA Security","category":"Privacy","summary":"Explains how the Agency keeps electronic patient information safe: the risk analysis, who has access, passwords and locked devices, the phones and tablets staff carry, backups and the emergency medical documentation system, business associate agreements, and what staff do when a device is lost or something looks wrong.","inShort":["Use patient information only in approved Agency apps, never in personal texts or email.","Lock your phone and tablet, and never share your password or log-in.","Never leave a device in sight in your car or alone in a patient’s home.","Report a lost or stolen device at once: (404) 555-0100, or after hours (404) 555-0199.","If the system is down, the disaster coordinator has an offline copy of key patient information."],"primaryCitation":"45 CFR Part 164 Subpart C","citations":["Ga. Comp. R. & Regs. 111-8-37-.23(4)","Ga. Comp. R. & Regs. 111-8-37-.11(1)"],"federalCitations":["45 CFR Part 164 Subpart C","45 CFR §164.304","45 CFR §164.306","45 CFR §164.308","45 CFR §164.310","45 CFR §164.312","45 CFR §164.314","45 CFR §164.316","42 CFR §418.104(c)","42 CFR §418.113(b)(3)"],"surveyorAsks":["Show me your most recent security risk analysis and the plan that came out of it.","How do you remove a nurse’s access to the electronic record on the day she leaves?"],"forms":[],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR Part 164 Subpart C)","5. Risk Analysis and Risk Management","6. Security Measures","7. Phones, Tablets, Computers and Passwords","8. Security Incidents","9. Contingency Plan, Backup and Emergency Documentation","10. Business Associates","11. Devices, Media and Disposal","12. Responsibilities","13. Records and Compliance Monitoring","14. Staff Training","15. References","16. Related Policies and Forms","17. Approval","18. Revision History"],"version":"1.0","sample":false,"pack":"ga-hospice","state":"Georgia","service":"Hospice","guides":[{"path":"/guides/hospice-policies/","h1":"What policies are required for hospice?"},{"path":"/guides/hospice-conditions-of-participation/","h1":"Hospice Conditions of Participation: which policies each one needs"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}