Skip to content

HIPAA Security

Sets out the administrative, physical and technical safeguards the Agency uses to protect electronic patient information under the HIPAA Security Rule and the Michigan records rules: the security risk analysis, the Security Official, access control, devices used in the field, passwords and authentication, encryption, audit logs, backups and contingency plans, disposal of devices and media, and how security incidents are reported.

Preview: full text with a package
About this policy
Policy number
MI-HSP-PRV-02
Version
1.0
Main rule
45 CFR Part 164, Subpart C
Library
Michigan hospice · 59 policies
Category
Privacy
Sections
20

In short

  • Use only your own login. Never share passwords, and lock your screen when you step away.
  • Keep patient information only in Agency systems: not in personal texts, email, photos or cloud storage.
  • Keep devices with you or locked out of sight. Report a lost or stolen device to the Security Official at once.
  • Do not click links or attachments you did not expect. Report suspicious emails right away.
  • If the system is down, use the downtime copies and enter the information as soon as it is back.

What's inside

20 sections. The full text comes with the One-time Policy Pack.

Full text with a package
  • Terms of Reference
  • 1. Purpose
  • 2. Scope
  • 3. Definitions
  • 4. Policy Statement (45 CFR §164.306; Mich. Admin. Code R 325.45203(2))
  • 5. Security Management
  • 6. Workforce Access
  • 7. Mobile Devices and Working in the Field
  • 8. Technical Safeguards
  • 9. Physical Safeguards
  • 10. Contingency Plan
  • 11. Business Associates and Vendors
  • 12. Security Incidents
  • 13. Responsibilities
  • 14. Records and Compliance Monitoring
  • 15. Staff Training
  • 16. References
  • 17. Related Policies and Forms
  • 18. Approval
  • 19. Revision History

An inspector may ask

  • Show me your most recent security risk analysis and the plan that came out of it.
  • How do you take away a former employee's access to the electronic record, and how fast?

See Cura Core with your agency's name on it.

Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.

Get startedSign in