{"ref":"TX-PRV-02","title":"HIPAA Security","category":"Privacy","summary":"Explains how the Agency keeps electronic client records safe: passwords, locked phones and computers, who has access, backups, and what staff do when a device is lost or something looks wrong, applying the HIPAA Security Rule and the Texas duty to protect sensitive personal information.","inShort":["Lock your phone with a PIN or fingerprint and keep it updated. Never let anyone else use your work apps.","Use only the approved work apps for client information. Never use regular texts, personal email, or social media.","Use your own login and a strong password. Never share it, and never use it for personal accounts.","If your phone is lost or stolen, or you clicked a strange link, call the office right away, day or night.","Do not save client papers, photos, or screenshots on your phone. Return all work devices on your last day."],"primaryCitation":"45 CFR §§164.302-164.318","citations":["Tex. Bus. & Com. Code §521.052","Tex. Bus. & Com. Code §521.053","Tex. Health & Safety Code §181.101","26 TAC §558.301"],"federalCitations":["45 CFR §§164.302-164.318","45 CFR §164.306","45 CFR §164.308","45 CFR §164.310","45 CFR §164.312","45 CFR §164.314","45 CFR §164.316"],"surveyorAsks":["Show me your most recent security risk analysis and the plan that came out of it.","How do you remove an attendant’s access to your scheduling and visit verification apps when the attendant leaves?"],"forms":[],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR §§164.302-164.318)","5. Risk Analysis and Risk Management","6. Security Measures","7. Phones, Computers, and Passwords","8. Security Incidents","9. Contingency Plan and Backup","10. Business Associates","11. Devices, Media, and Disposal","12. Staff Training","13. Responsibilities","14. Records and Documentation","14.1 Compliance Monitoring","15. References","16. Related Policies and Forms","17. Approval","18. Revision History"],"version":"1.0","sample":false,"pack":"tx-pas","state":"Texas","service":"Home care","guides":[{"path":"/guides/home-care-agency-policies/","h1":"What policies does a home care agency need?"}],"agency":{"name":"Sample Home Care Agency","legalName":"Sample Home Care Agency, LLC","logo":null}}