{"ref":"PA-HC-PRV-01","title":"HIPAA Privacy and Confidentiality of Consumer Information","category":"Privacy","summary":"Protects consumers’ health and personal information: the Agency treats itself as a HIPAA covered entity, names a Privacy Official, gives every consumer a Notice of Privacy Practices, shares information only as HIPAA and Pennsylvania law allow, honors consumers’ rights to see, copy, correct and get an accounting of their records, and trains and disciplines staff on confidentiality.","inShort":["Consumer information is private. Share it only with people who need it to care for the consumer or to do their job.","Never talk about consumers in public or post about them on social media, even without names.","Before giving information on the phone, make sure who you are speaking to. If unsure, take a message for the office.","If a consumer asks to see or copy their record, tell the office the same day. The Privacy Official is Lee Sample.","Report any lost paper, lost phone or information sent to the wrong person at once."],"primaryCitation":"45 CFR §164.502","citations":["55 Pa. Code §52.29","55 Pa. Code §52.15(c)","28 Pa. Code §611.55(b)(1)","35 P.S. §10225.705","35 P.S. §10210.505","23 Pa.C.S. §6311.1"],"federalCitations":["45 CFR §164.502","45 CFR §164.504(e)","45 CFR §164.506","45 CFR §164.508","45 CFR §164.510","45 CFR §164.512","45 CFR §164.514(d)","45 CFR §164.520","45 CFR §164.522","45 CFR §164.524","45 CFR §164.526","45 CFR §164.528","45 CFR §164.530"],"surveyorAsks":["Who is your privacy official? Show me the written designation.","Show me the Notice of Privacy Practices and this consumer’s acknowledgment of receiving it."],"forms":[{"ref":"PA-HC-PRV-01-A","title":"Notice of Privacy Practices"},{"ref":"PA-HC-PRV-01-B","title":"Authorization to Use or Disclose Health Information"}],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR §164.502)","5. When Consumer Information May Be Shared","6. Everyday Privacy Rules for Staff","7. Consumer Privacy Rights","8. Personal Representatives, Minors, and Deceased Consumers","9. Business Associates","10. Protective Services and Child Abuse Information","11. Safeguards, Mitigation, and Sanctions","12. Responsibilities","13. Records and Compliance Monitoring","14. Staff Training","15. References","16. Related Policies and Forms","17. Approval","18. Revision History"],"version":"1.0","sample":false,"pack":"pa-hca","state":"Pennsylvania","service":"Home care","guides":[{"path":"/guides/home-care-agency-policies/","h1":"What policies does a home care agency need?"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}