{"ref":"OH-HH-PRV-01","title":"HIPAA Privacy and Ohio Confidentiality Laws","category":"Privacy","summary":"Protects the privacy of patients’ health information under the HIPAA Privacy Rule, the home health Conditions of Participation and Ohio’s confidentiality laws for HIV test results and diagnoses and for Medicaid recipient information. Names the Privacy Official, sets out when information may be shared, lists patients’ privacy rights and the time frames for each, keeps OASIS data confidential, and requires a Notice of Privacy Practices, training, sanctions and business associate agreements.","inShort":["Share patient information only with the care team, the patient and the people the patient has approved, and only what is needed.","Give every new patient the Notice of Privacy Practices and the OASIS privacy notice, and get the acknowledgment signed.","HIV information and Medicaid information have extra protection in Ohio. Never share them outside the care team without the Privacy Official.","Never post about a patient on social media, even without a name, and take photos only in the approved app.","Send requests from police, lawyers, insurers or reporters to the office. Report any privacy mistake at once."],"primaryCitation":"45 CFR §164.530","citations":["ORC 3701.243","ORC 3701.243(B)","ORC 3701.243(E)","ORC 5101.27","OAC 5160-1-17.2(K)","ORC 3701.74","ORC 5101.63","ORC 2151.421"],"federalCitations":["45 CFR §164.520","45 CFR §164.524","45 CFR §164.526","45 CFR §164.528","45 CFR §164.530","45 CFR §164.502","45 CFR §164.508","45 CFR §164.512","42 CFR §484.40","42 CFR §484.50(a)(1)(iii)","42 CFR §484.50(c)(6)","42 CFR §484.110(d)"],"surveyorAsks":["Who is your Privacy Official? Show me your Notice of Privacy Practices and where it is posted.","Show me this patient’s signed acknowledgment of the Notice of Privacy Practices and the OASIS privacy notice."],"forms":[{"ref":"OH-HH-PRV-01-A","title":"Acknowledgment of Receipt of Notice of Privacy Practices"}],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR §164.530)","5. OASIS Confidentiality","6. When Patient Information May Be Shared","7. Information with Extra Protection in Ohio","8. Patient Privacy Rights","9. Procedure","10. Notice of Privacy Practices","11. Responsibilities","12. Records and Compliance Monitoring","13. Staff Training","14. References","15. Related Policies and Forms","16. Approval","17. Revision History"],"version":"1.0","sample":false,"pack":"oh-hha","state":"Ohio","service":"Home health","guides":[{"path":"/guides/home-health-agency-policies/","h1":"What policies and procedures are required for home health agencies?"},{"path":"/guides/home-health-conditions-of-participation/","h1":"Home health Conditions of Participation: which policies each one needs"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}