Skip to content

HIPAA Security, Devices, and Electronic Records

How the Agency protects electronic participant information under the HIPAA Security Rule and its business associate duties to the state agency: the security official, the annual risk analysis, administrative, physical and technical safeguards, encryption of portable devices and transmissions, rules for phones and the EVV application, e-mail, text and fax, backups and system outages, security incidents, and documentation.

Preview: full text with a package
About this policy
Policy number
MO-HC-PRV-02
Version
1.0
Main rule
45 CFR §164.308
Library
Missouri home care · 50 policies
Category
Privacy
Sections
20

In short

  • Lock your phone with a PIN, password or fingerprint, and keep the automatic screen lock on.
  • Never share your EVV log-in or let anyone else record a visit for you.
  • Keep participant information only in the EVV app and Agency systems, not in your personal notes, photos or messages.
  • If your phone is lost or stolen, call the office immediately, and before your next visit.
  • Do not open links or attachments you do not expect. Report anything suspicious to the office.

What's inside

20 sections. The full text comes with the One-time Policy Pack.

Full text with a package
  • Terms of Reference
  • 1. Purpose
  • 2. Scope
  • 3. Definitions
  • 4. Policy Statement (45 CFR §164.308)
  • 5. Security Official and Risk Analysis
  • 6. Administrative Safeguards
  • 7. Physical Safeguards
  • 8. Technical Safeguards
  • 9. Phones, the EVV Application and Personal Devices
  • 10. E-mail, Text, Fax and Paper Outside the Office
  • 11. Backups, Outages and Emergency Mode
  • 12. Security Incidents
  • 13. Responsibilities
  • 14. Records and Compliance Monitoring
  • 15. Staff Training
  • 16. References
  • 17. Related Policies and Forms
  • 18. Approval
  • 19. Revision History

An inspector may ask

  • When did you last do a security risk analysis, and what did you change because of it?
  • Show me how a worker's access to the EVV system is removed when the worker leaves.

See Cura Core with your agency's name on it.

Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.

Get startedSign in