HIPAA Privacy and OASIS Confidentiality
Protects the privacy of patients’ health information under the HIPAA Privacy Rule and Georgia’s rule that clinical record information is safeguarded and released only with written consent unless the law authorizes it. Names the Administrator as Privacy Official, sets out when information may be shared, lists patients’ privacy rights and the time frames for each, keeps OASIS data confidential, and requires training, sanctions, and business associate agreements.
About this policy
- Policy number
- GA-HH-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR Part 164 Subpart E
- Library
- Georgia home health · 56 policies
- Category
- Privacy
- Sections
- 17
In short
- Patient information is private. Share it only with the care team, the doctor, and people the patient has approved.
- Give every new patient our Notice of Privacy Practices and get the acknowledgment signed. Medicare and Medicaid patients also get the OASIS privacy notice.
- Speak quietly about care when others are around, and never post about a patient on social media, even without a name.
- Send police, lawyers, insurers, and reporters to the office. Do not answer their questions yourself.
- Tell the Administrator at once about a misdirected fax, a lost folder, or anything else that went wrong.
What's inside
17 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR Part 164 Subpart E; Ga. Comp. R. & Regs. 111-8-31-.09(f))
- 5. OASIS Confidentiality
- 6. When Patient Information May Be Shared
- 7. Patient Privacy Rights
- 8. Procedure
- 9. Changes to the Notice
- 10. Responsibilities
- 11. Records and Compliance Monitoring
- 12. Staff Training
- 13. References
- 14. Related Policies and Forms
- 15. Approval
- 16. Revision History
An inspector may ask
- Who is your Privacy Official? Show me your Notice of Privacy Practices and where it is posted.
- Show me the patient’s signed acknowledgment of the Notice of Privacy Practices and, for a Medicare or Medicaid patient, the OASIS privacy notice.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.