Skip to content

HIPAA Security

Sets out how the Agency protects electronic patient information under the HIPAA Security Rule: the security official, the yearly risk analysis and risk management plan, administrative, physical and technical safeguards, rules for phones, tablets and laptops used in homes and facilities, security incidents, backups and the contingency plan that keeps records available in an emergency, business associates, device disposal and documentation. It also meets the Missouri duty to safeguard the clinical record against loss, destruction and unauthorized use.

Preview: full text with a package
About this policy
Policy number
MO-HSP-PRV-02
Version
1.0
Main rule
45 CFR Part 164, Subpart C
Library
Missouri hospice · 59 policies
Category
Privacy
Sections
19

In short

  • Use only your own log-in and never share passwords or codes.
  • Keep Agency phones, tablets and laptops locked, encrypted and with you. Never leave them in view in a car.
  • Send patient information only through the record system, secure messaging or encrypted email.
  • Report a lost device, a suspicious email you clicked or anything odd in the system at once.
  • Know the downtime plan: how to see your patients' medications and plan of care if the system is down.

What's inside

19 sections. The full text comes with the One-time Policy Pack.

Full text with a package
  • Terms of Reference
  • 1. Purpose
  • 2. Scope
  • 3. Definitions
  • 4. Policy Statement (45 CFR Part 164, Subpart C)
  • 5. Risk Analysis and Risk Management
  • 6. Administrative Safeguards (45 CFR §164.308)
  • 7. Physical Safeguards (45 CFR §164.310)
  • 8. Technical Safeguards and Mobile Devices (45 CFR §164.312)
  • 9. Security Incidents
  • 10. Contingency Plan, Backups and Emergency Documentation
  • 11. Business Associates
  • 12. Staff Training
  • 13. Responsibilities
  • 14. Records and Compliance Monitoring
  • 15. References
  • 16. Related Policies and Forms
  • 17. Approval
  • 18. Revision History

An inspector may ask

  • When did you last complete a security risk analysis, and what did you change because of it?
  • What happens if a nurse loses a tablet with patient records on it?

See Cura Core with your agency's name on it.

Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.

Get startedSign in