{"ref":"MI-HSP-PRV-01","title":"HIPAA Privacy and Michigan Confidentiality Laws","category":"Privacy","summary":"Explains how the Agency protects patients' health information under the HIPAA Privacy Rule and the Michigan confidentiality laws: who may see it, when it may be shared with or without the patient's permission, how families are kept informed, the Notice of Privacy Practices, patients' privacy rights, business associates, and how privacy complaints and violations are handled.","inShort":["Only look at records of patients you care for or have a work reason to see. Every look is logged.","Ask the patient who may hear about their care. Check the record before you talk to family on the phone.","Never post about patients, take patient photos on your own phone, or talk about patients in public.","Send subpoenas, police, lawyer and media requests to Lee Sample the same day.","Tell Lee Sample at once if information goes to the wrong person or a device or paper is lost."],"primaryCitation":"45 CFR Part 164, Subpart E","citations":["MCL 333.20201(2)(b)-(c)","Mich. Admin. Code R 325.45205(2)-(3)","MCL 333.20175(3)","MCL 333.26265","MCL 333.5131","MCL 333.20175(13)"],"federalCitations":["45 CFR Part 164, Subpart E","45 CFR §164.502","45 CFR §164.506","45 CFR §164.508","45 CFR §164.510","45 CFR §164.512","45 CFR §164.514(d)","45 CFR §164.520","45 CFR §164.522","45 CFR §164.524","45 CFR §164.526","45 CFR §164.528","45 CFR §164.530","42 CFR §418.104(c)","42 CFR Part 2"],"surveyorAsks":["Who is your Privacy Official? Show me your Notice of Privacy Practices and this patient's acknowledgment.","A daughter who is not the patient advocate calls asking about her father's condition. What may the nurse tell her?"],"forms":[{"ref":"MI-HSP-PRV-01-A","title":"Notice of Privacy Practices"}],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR Part 164, Subpart E; MCL 333.20201(2)(c); Mich. Admin. Code R 325.45205)","5. Uses and Disclosures Without the Patient's Authorization","6. Uses and Disclosures That Need a Written Authorization","7. Minimum Necessary and Everyday Safeguards","8. Notice of Privacy Practices","9. Patients' Privacy Rights","10. Business Associates","11. Requests From Outside the Agency","12. Privacy Complaints, Mitigation and Sanctions","13. Responsibilities","14. Records and Compliance Monitoring","15. Staff Training","16. References","17. Related Policies and Forms","18. Approval","19. Revision History"],"version":"1.0","sample":false,"pack":"mi-hospice","state":"Michigan","service":"Hospice","guides":[{"path":"/guides/hospice-policies/","h1":"What policies are required for hospice?"},{"path":"/guides/hospice-conditions-of-participation/","h1":"Hospice Conditions of Participation: which policies each one needs"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}