{"ref":"OH-HC-PRV-01","title":"Privacy and Confidentiality of Client Information","category":"Privacy","summary":"Sets how the Agency protects client information: when HIPAA applies, the privacy official, the minimum necessary rule, when information may be shared with family, case managers and others, the Notice of Privacy Practices, the client's rights to see, copy, amend and get an accounting of their information with the federal time limits, personal representatives, privacy in the client's home, business associates, complaints, sanctions and the Medicaid confidentiality rules that bind ODA and ODM providers.","inShort":["Share client information only with people who need it to care for the client, and only what they need.","Do not talk about clients in public, with other clients or with your own family. Never post about a client online.","If someone asks about a client by phone, check who they are and refer them to your supervisor if unsure.","Give each new client the Notice of Privacy Practices and ask them to sign that they received it.","Questions or problems go to the privacy official, Lee Sample."],"primaryCitation":"45 CFR §164.502","citations":["OAC 173-39-02(B)(4), (B)(8)(h)","OAC 5160-44-31(B)(12)","OAC 5160-45-03(A)(10), (11)","ORC 5160.45 to 5160.481"],"federalCitations":["45 CFR §160.103","45 CFR §164.502","45 CFR §164.506","45 CFR §164.508","45 CFR §164.510","45 CFR §164.512","45 CFR §164.520","45 CFR §164.522","45 CFR §164.524","45 CFR §164.526","45 CFR §164.528","45 CFR §164.530","42 CFR §431.300 to 431.307"],"surveyorAsks":["Who is your privacy official, and how does a client reach that person?","Show me this client's signed acknowledgment of your Notice of Privacy Practices."],"forms":[{"ref":"OH-HC-PRV-01-A","title":"Notice of Privacy Practices"},{"ref":"OH-HC-PRV-01-B","title":"Request to Inspect or Copy Records"}],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR §164.502)","5. When HIPAA Applies","6. The Privacy Official","7. Using and Sharing Client Information","8. Minimum Necessary","9. Notice of Privacy Practices","10. The Client's Privacy Rights","11. Privacy in the Client's Home and in the Community","12. Business Associates","13. Privacy Complaints, Retaliation and Waivers","14. Sanctions and Mitigation","15. Responsibilities","16. Records and Compliance Monitoring","17. Staff Training","18. References","19. Related Policies and Forms","20. Approval","21. Revision History"],"version":"1.0","sample":false,"pack":"oh-hca","state":"Ohio","service":"Home care","guides":[{"path":"/guides/home-care-agency-policies/","h1":"What policies does a home care agency need?"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}