HIPAA Security
Puts in place the HIPAA Security Rule’s administrative, physical, and technical safeguards for electronic patient information, with particular attention to the laptops, tablets, and phones clinicians carry into patients’ homes: risk analysis and risk management, access control, device rules, encryption, OASIS transmission, security incidents, backup and contingency planning, business associates, and disposal.
About this policy
- Policy number
- GA-HH-PRV-02
- Version
- 1.0
- Main rule
- 45 CFR §§164.302-164.318
- Library
- Georgia home health · 56 policies
- Category
- Privacy
- Sections
- 21
In short
- Use patient information only in the approved apps. Never use personal texts, personal email, or your photo gallery.
- Lock your device every time it leaves your hand, and never share your password or let anyone use your log-in.
- Never leave a device in a patient’s home or where it can be seen in your car.
- Use public Wi-Fi only through the Agency’s secure connection, or work offline and sync later.
- Report a lost or stolen device, or a suspicious email you clicked, to the office at once on (404) 555-0100 or (404) 555-0199.
What's inside
21 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR §§164.302-164.318)
- 5. Risk Analysis and Risk Management
- 6. Security Measures
- 7. Point-of-Care Devices, Computers, and Passwords
- 8. OASIS Transmission
- 9. Security Incidents
- 10. Contingency Plan and Backup
- 11. Business Associates
- 12. Devices, Media, and Disposal
- 13. Security Training and Reminders
- 14. Responsibilities
- 15. Records and Compliance Monitoring
- 16. Staff Training
- 17. References
- 18. Related Policies and Forms
- 19. Approval
- 20. Revision History
An inspector may ask
- Who is your Security Official? Show me your most recent risk analysis and your risk management plan.
- How do you control which staff can see which patients’ records, and how quickly is access removed when someone leaves?
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.