HIPAA Privacy and Missouri Confidentiality Requirements
Explains how the Agency protects patients' health information under the HIPAA Privacy Rule and Missouri law: the patient's Missouri right to confidentiality of the clinical record and to be told the disclosure policy, the privacy official, when staff may and may not share information (including with family members, nursing facilities, the Department and the abuse hotline), Missouri's stricter rule for HIV information, patients' privacy rights and time frames, everyday privacy in homes and facilities, business associates, complaints and sanctions.
- Policy number
- MO-HSP-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR Part 164, Subpart E
- Library
- Missouri hospice · 59 policies
- Category
- Privacy
- Sections
- 19
In short
- Share patient information only with people who need it for care, payment or Agency work, or whom the patient has agreed to.
- Check who a caller is before giving any information. If unsure, call back after checking the record.
- HIV information is strictly confidential in Missouri. Share it only with staff giving direct care or with written permission.
- Never text, email or post patient information from personal accounts, and never photograph patients on your own phone.
- Reporting abuse to the hotline is never a privacy violation.
- Tell the privacy official, Lee Sample, the same day about any privacy worry.
What's inside
19 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR Part 164, Subpart E; 19 CSR 30-35.010(1)(F)3.H)
- 5. Privacy Official
- 6. When Information May Be Shared
- 7. Missouri Rules That Give Extra Protection
- 8. Patients' Privacy Rights
- 9. Everyday Privacy in Homes, Facilities and the Office
- 10. Business Associates
- 11. Complaints, Mitigation and Sanctions
- 12. Responsibilities
- 13. Records and Compliance Monitoring
- 14. Staff Training
- 15. References
- 16. Related Policies and Forms
- 17. Approval
- 18. Revision History
An inspector may ask
- Who is your privacy official, and how does a patient find out your policy for disclosing clinical records?
- Show me the notice of privacy practices and how you document that the patient received it.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.