{"ref":"MI-HC-PRV-01","title":"HIPAA Privacy and Confidentiality of Client Information","category":"Privacy","summary":"Makes every employee and volunteer protect clients' health information as the HIPAA Privacy Rule, the MI Choice confidentiality standard and the Home Help operating standards require: a designated privacy official, a Notice of Privacy Practices with a signed acknowledgment, uses and disclosures only for treatment, payment, operations or as the law allows, written authorization for anything else, the client's rights to access, amendment, an accounting, restrictions and confidential communications, a record of every release, workforce training, sanctions, complaints without retaliation, and six-year documentation. It also sets the everyday rules caregivers follow in clients' homes.","inShort":["Client information is private. Share it only with people who need it for the client's care or payment.","Never post, photograph or text anything about a client from your personal accounts.","Do not confirm that someone is a client to callers you cannot verify. Send them to the office.","Each new client gets the Notice of Privacy Practices and is asked to sign the acknowledgment.","Think information went to the wrong person? Tell the privacy official, Lee Sample, the same day."],"primaryCitation":"45 CFR §164.530","citations":["MPM MI Choice Waiver §9.7","MPM MI Choice Waiver §9.12.C","MPM Home Help §8.6","MPM General Information for Providers §14.4","MPM General Information for Providers §14.5","MPM General Information for Providers §14.5.A","MCL 400.11a","MCL 722.623"],"federalCitations":["45 CFR §164.502","45 CFR §164.506","45 CFR §164.508","45 CFR §164.510","45 CFR §164.512","45 CFR §164.520","45 CFR §164.522","45 CFR §164.524","45 CFR §164.526","45 CFR §164.528","45 CFR §164.530"],"surveyorAsks":["Who is your privacy official? Show me the designation.","Show me your Notice of Privacy Practices and a signed acknowledgment from a client who started this year."],"forms":[{"ref":"MI-HC-PRV-01-A","title":"Notice of Privacy Practices Acknowledgment"},{"ref":"MI-HC-PRV-01-B","title":"Authorization to Release Information"}],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR §164.530)","5. Privacy Official and Contact Person","6. Notice of Privacy Practices","7. When Client Information May Be Used or Shared Without Authorization","8. When Written Authorization Is Required","9. Record of Every Release","10. Client Privacy Rights","11. Everyday Rules for Caregivers and Office Staff","12. Complaints, Sanctions, Mitigation and No Retaliation","13. Responsibilities","14. Records and Compliance Monitoring","15. Staff Training","16. References","17. Related Policies and Forms","18. Approval","19. Revision History"],"version":"1.0","sample":false,"pack":"mi-hca","state":"Michigan","service":"Home care","guides":[{"path":"/guides/home-care-agency-policies/","h1":"What policies does a home care agency need?"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}