Confidentiality and HIPAA Privacy
Sets out how the Agency keeps client and employee information confidential, as 10A NCAC 13J .1001(a)(10) and G.S. 131E-144.3(5) require, and how it meets the HIPAA Privacy Rule: the privacy official, minimum necessary use, a table of who may receive client information (including mandated reports to county social services and law enforcement and the client's written right to object to state review of the record under G.S. 131E-141(b)), the Notice of Privacy Practices, the client's rights to see, copy, amend and get an accounting of disclosures within the federal time limits, business associates, sanctions and training.
- Policy number
- NC-HC-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR Part 164 Subpart E
- Library
- North Carolina home care · 50 policies
- Category
- Privacy
- Sections
- 17
In short
- Everything about a client is private, even the fact that the person is a client.
- Talk about a client only with the client, the responsible party, approved contacts and Agency staff.
- Send anyone else who asks, including police, lawyers or reporters, to the office.
- No photos, recordings or social media posts about clients, ever.
- A client may refuse in writing to let the state review the record. The office checks for this before showing records.
- Tell the privacy official at once if information goes to the wrong person or a folder or phone is lost.
What's inside
17 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR Part 164 Subpart E)
- 5. When Client Information May Be Shared
- 6. The Client's Written Right to Object to State Review
- 7. Client Privacy Rights
- 8. Procedure
- 9. Employee Confidentiality
- 10. Responsibilities
- 11. Records and Compliance Monitoring
- 12. Staff Training
- 13. References
- 14. Related Policies and Forms
- 15. Approval
- 16. Revision History
An inspector may ask
- Who is your privacy official, and where is the designation documented?
- Show me the Notice of Privacy Practices and a client's signed acknowledgment.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.