{"ref":"TX-HH-PRV-02","title":"HIPAA Security","category":"Privacy","summary":"Sets out how the Agency keeps electronic patient information confidential, accurate, and available: the risk analysis and risk management plan, access control, rules for laptops, tablets, and phones used at the point of care, OASIS transmission, backups and the contingency plan, business associates, device disposal, and incident response.","inShort":["Lock your laptop, tablet, or phone with a PIN or password, and never share your log-in.","Use only the Agency’s approved apps for patient information. No personal texts, email, or photo gallery.","Never leave a device in a patient’s home or visible in your car.","Report a lost or stolen device or a strange email or link to the office right away.","Return all Agency devices on your last day."],"primaryCitation":"45 CFR §§164.302-164.318","citations":["Tex. Bus. & Com. Code §521.052","Tex. Bus. & Com. Code §521.053","Tex. Health & Safety Code §181.101","26 TAC §558.301(a)(5)-(6)","26 TAC §558.256"],"federalCitations":["45 CFR §§164.302-164.318","45 CFR §164.306","45 CFR §164.308","45 CFR §164.310","45 CFR §164.312","45 CFR §164.314","45 CFR §164.316","42 CFR §484.45(c)","42 CFR §484.102(b)(4)"],"surveyorAsks":["Show me your most recent security risk analysis and your risk management plan.","How do you remove a clinician’s access to the electronic record when they leave?"],"forms":[],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR §§164.302-164.318)","5. Risk Analysis and Risk Management","6. Security Measures","7. Point-of-Care Devices, Computers, and Passwords","8. OASIS Transmission","9. Security Incidents","10. Contingency Plan and Backup","11. Business Associates","12. Devices, Media, and Disposal","13. Staff Training","14. Responsibilities","15. Records and Compliance Monitoring","16. References","17. Related Policies and Forms","18. Approval","19. Revision History"],"version":"1.0","sample":false,"pack":"tx-lhhs","state":"Texas","service":"Home health","guides":[{"path":"/guides/home-health-agency-policies/","h1":"What policies and procedures are required for home health agencies?"},{"path":"/guides/home-health-conditions-of-participation/","h1":"Home health Conditions of Participation: which policies each one needs"}],"agency":{"name":"Sample Home Health Agency","legalName":"Sample Home Health Agency, LLC","logo":null}}