HIPAA Privacy and Confidentiality of Participant Information
The Agency's confidentiality and HIPAA privacy policy: the privacy official, the everyday rules workers follow in participants' homes, when participant information may be used or shared (and the stricter limits in the MMAC agreement), minimum necessary access, participants' privacy rights and the time limits for access, amendment and accounting, requests from the state agency as its business associate, privacy complaints, sanctions and training.
About this policy
- Policy number
- MO-HC-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR §164.530
- Library
- Missouri home care · 50 policies
- Category
- Privacy
- Sections
- 22
In short
- Everything you learn about a participant and the household is private. Share it only with Agency staff who need it for the participant's care.
- Do not talk about a participant with family, neighbors or visitors unless the participant agrees. Say, "Please call the office."
- Never take photos of participants, their homes or papers, and never post about them on social media.
- Do not text or e-mail participant information from personal accounts. Use only the EVV app and Agency systems.
- If information is lost, stolen or shared by mistake, tell the privacy official, Lee Sample, right away.
What's inside
22 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR §164.530)
- 5. Privacy Official and Contact Person
- 6. Everyday Rules in the Participant's Home and the Office
- 7. When Participant Information May Be Used or Shared
- 8. Minimum Necessary and Access by Role
- 9. Participants' Privacy Rights
- 10. Requests from the State Agency as Business Associate
- 11. Personal Representatives and Family Members
- 12. Business Associates of the Agency
- 13. Privacy Complaints, Sanctions and Mitigation
- 14. Changes to This Policy and the Notice
- 15. Responsibilities
- 16. Records and Compliance Monitoring
- 17. Staff Training
- 18. References
- 19. Related Policies and Forms
- 20. Approval
- 21. Revision History
An inspector may ask
- Who is your privacy official, and where is that designation documented?
- Show me how a participant receives your Notice of Privacy Practices and where the acknowledgment is filed.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.