Skip to content

HIPAA Privacy and Michigan Confidentiality Laws

Explains how the Agency protects patients' health information under the HIPAA Privacy Rule and the Michigan confidentiality laws: who may see it, when it may be shared with or without the patient's permission, how families are kept informed, the Notice of Privacy Practices, patients' privacy rights, business associates, and how privacy complaints and violations are handled.

Preview: full text with a package
About this policy
Policy number
MI-HSP-PRV-01
Version
1.0
Main rule
45 CFR Part 164, Subpart E
Library
Michigan hospice · 59 policies
Category
Privacy
Sections
20

In short

  • Only look at records of patients you care for or have a work reason to see. Every look is logged.
  • Ask the patient who may hear about their care. Check the record before you talk to family on the phone.
  • Never post about patients, take patient photos on your own phone, or talk about patients in public.
  • Send subpoenas, police, lawyer and media requests to Lee Sample the same day.
  • Tell Lee Sample at once if information goes to the wrong person or a device or paper is lost.

What's inside

20 sections. The full text comes with the One-time Policy Pack.

Full text with a package
  • Terms of Reference
  • 1. Purpose
  • 2. Scope
  • 3. Definitions
  • 4. Policy Statement (45 CFR Part 164, Subpart E; MCL 333.20201(2)(c); Mich. Admin. Code R 325.45205)
  • 5. Uses and Disclosures Without the Patient's Authorization
  • 6. Uses and Disclosures That Need a Written Authorization
  • 7. Minimum Necessary and Everyday Safeguards
  • 8. Notice of Privacy Practices
  • 9. Patients' Privacy Rights
  • 10. Business Associates
  • 11. Requests From Outside the Agency
  • 12. Privacy Complaints, Mitigation and Sanctions
  • 13. Responsibilities
  • 14. Records and Compliance Monitoring
  • 15. Staff Training
  • 16. References
  • 17. Related Policies and Forms
  • 18. Approval
  • 19. Revision History

An inspector may ask

  • Who is your Privacy Official? Show me your Notice of Privacy Practices and this patient's acknowledgment.
  • A daughter who is not the patient advocate calls asking about her father's condition. What may the nurse tell her?

See Cura Core with your agency's name on it.

Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.

Get startedSign in