Skip to content

Confidentiality of Client Information and HIPAA Privacy

Protects every piece of information the Agency holds about a client. Sets who may see client information, the clearance and signed confidentiality agreement needed before anyone has access, when information may be shared without the client's written authorization and when an authorization is needed, how information received from doctors and other providers is handled, and the extra HIPAA duties that apply if the Agency is a HIPAA covered entity.

Preview: full text with a package
About this policy
Policy number
CA-HC-PRV-01
Version
1.0
Main rule
Cal. Health & Safety Code §1796.43(a)(1)
Library
California home care · 50 policies
Category
Privacy
Sections
19

In short

  • Everything you learn about a client is confidential, including the fact that they are a client.
  • Never post about clients on social media or take photos without written permission.
  • Keep client information on Agency systems only, never in personal texts or email.
  • Share information only with people the policy allows; ask the office if you are not sure.
  • Tell the Administrator at once if client information is lost, stolen or sent to the wrong person.

What's inside

19 sections. The full text comes with the One-time Policy Pack.

Full text with a package
  • Terms of Reference
  • 1. Purpose
  • 2. Scope
  • 3. Definitions
  • 4. Policy Statement (Cal. Health & Safety Code §1796.43(a)(1))
  • 5. Who May See Client Information
  • 6. Protecting Information Every Day
  • 7. When Information May Be Shared
  • 8. Authorizations to Release Information
  • 9. Information Received from Health Care Providers and Contractors
  • 10. If the Agency Is a HIPAA Covered Entity
  • 11. Violations
  • 12. Responsibilities
  • 13. Records and Compliance Monitoring
  • 14. Staff Training
  • 15. References
  • 16. Related Policies and Forms
  • 17. Approval
  • 18. Revision History

An inspector may ask

  • Who in your organization can see client information, and were they cleared before they had access?
  • Show me a signed staff confidentiality agreement and a client authorization to release information.

See Cura Core with your agency's name on it.

Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.