HIPAA Privacy and OASIS Confidentiality
Sets out how the Agency protects the privacy of patient health information under the HIPAA Privacy Rule (45 CFR Part 164, Subpart E) and Louisiana's right to a confidential clinical record (LAC 48:I §9125.A.6): the privacy official, permitted uses and disclosures, authorizations, the minimum necessary rule, the Notice of Privacy Practices, patient privacy rights and their time limits, privacy in the home and the office, business associates, complaints, sanctions and documentation, and, if the Agency is Medicare-certified, the confidentiality of OASIS information under 42 CFR §484.40.
- Policy number
- LA-HH-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR §164.530
- Library
- Louisiana home health · 57 policies
- Category
- Privacy
- Sections
- 23
In short
- Look at and share only the patient information you need for your job.
- Talk privately with the patient, and ask before discussing care in front of visitors.
- Never post about patients on social media or text patient details from a personal app.
- Lock records and devices out of sight. Never leave them in view in your car.
- Send privacy requests and complaints to Lee Sample the same day.
What's inside
23 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR §164.530)
- 5. Privacy Official and Complaint Contact
- 6. Uses and Disclosures Without the Patient's Authorization
- 7. Uses and Disclosures That Need a Written Authorization
- 8. Minimum Necessary and Role-Based Access
- 9. Notice of Privacy Practices
- 10. Patient Privacy Rights
- 11. Privacy in the Home, on the Road, and in the Office
- 12. OASIS Confidentiality (If Medicare-Certified)
- 13. Accounting of Disclosures
- 14. Business Associates
- 15. Complaints, Sanctions, Mitigation, and No Retaliation
- 16. Responsibilities
- 17. Records and Compliance Monitoring
- 18. Staff Training
- 19. References
- 20. Related Policies and Forms
- 21. Approval
- 22. Revision History
An inspector may ask
- Who is your privacy official, and where is that designation documented?
- Show me your Notice of Privacy Practices and the patient's signed acknowledgment of receiving it.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.