Skip to content

HIPAA Privacy and OASIS Confidentiality

Sets out how the Agency protects the privacy of patient health information under the HIPAA Privacy Rule and keeps OASIS data confidential under 42 CFR §484.40: the privacy official and complaint contact, the notice of privacy practices and acknowledgment, minimum necessary, sharing with family and caregivers, patients' privacy rights, safeguards in the home and the office, training, sanctions, mitigation and the six-year documentation rule.

Preview: full text with a package
About this policy
Policy number
MO-HH-PRV-01
Version
1.0
Main rule
45 CFR §164.530
Library
Missouri home health · 57 policies
Category
Privacy
Sections
20

In short

  • Give every new patient the privacy notice and ask them to sign the acknowledgment.
  • Look at a record only when your job needs it. Access is logged and checked.
  • Ask the patient before you talk about care in front of visitors or family.
  • Never post about patients on social media or use personal texts or email for patient information.
  • OASIS information is confidential and is never released to the public.
  • Report any privacy problem at once to Lee Sample.

What's inside

20 sections. The full text comes with the One-time Policy Pack.

Full text with a package
  • Terms of Reference
  • 1. Purpose
  • 2. Scope
  • 3. Definitions
  • 4. Policy Statement (45 CFR Part 164, Subpart E; 42 CFR §484.40)
  • 5. Notice of Privacy Practices
  • 6. OASIS Privacy Notice and Confidentiality
  • 7. Everyday Uses and Disclosures
  • 8. Patients' Privacy Rights
  • 9. Safeguards in the Home, the Office, and on the Road
  • 10. Business Associates
  • 11. Missouri Law and Changes in Federal Law
  • 12. Complaints, Sanctions, and Mitigation
  • 13. Responsibilities
  • 14. Records and Compliance Monitoring
  • 15. Staff Training
  • 16. References
  • 17. Related Policies and Forms
  • 18. Approval
  • 19. Revision History

An inspector may ask

  • Who is your privacy official, and who takes privacy complaints?
  • Show me the notice of privacy practices and the patient's signed acknowledgment.

See Cura Core with your agency's name on it.

Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.