HIPAA Privacy and Patient and Employee Confidentiality
Sets out how the Agency protects the confidentiality of patient and employee information, as 10A NCAC 13J .1001(a)(10) and G.S. 131E-144.3(5) require, and how it meets the HIPAA Privacy Rule: the Privacy Official, the Notice of Privacy Practices given at the start of care, when information may be shared without the patient’s authorization (including reports to the county department of social services and the Health Care Personnel Registry), the patient’s privacy rights and their time limits, and OASIS confidentiality.
About this policy
- Policy number
- NC-HH-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR Part 164 Subpart E
- Library
- North Carolina home health · 57 policies
- Category
- Privacy
- Sections
- 18
In short
- Talk about a patient only with the patient, people the patient has approved, the care team and the physician. Speak quietly when others can hear.
- At the first visit, give the Notice of Privacy Practices and the OASIS privacy notice and ask the patient to sign the receipt. If the patient will not sign, write down your effort and the reason.
- If someone asks about a patient and you do not know that the person is approved, do not share. Refer the person to the office.
- Never post about a patient on social media, even without a name. Take photographs only inside the approved clinical app, with the patient’s consent.
- Privacy never stops a required report: reports of suspected abuse to the county department of social services are allowed and required.
- Tell the Privacy Official, Lee Sample, at once about any lost folder or phone, misdirected fax or overheard conversation.
What's inside
18 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (10A NCAC 13J .1001(a)(10); G.S. 131E-144.3(5); 45 CFR Part 164 Subpart E)
- 5. Notice of Privacy Practices
- 6. OASIS Confidentiality
- 7. When Patient Information May Be Shared
- 8. Patient Privacy Rights
- 9. Privacy Practice in the Home and the Office
- 10. Employee and Applicant Confidentiality
- 11. Responsibilities
- 12. Records and Compliance Monitoring
- 13. Staff Training
- 14. References
- 15. Related Policies and Forms
- 16. Approval
- 17. Revision History
An inspector may ask
- Who is your Privacy Official? Show me the designation.
- How do you know this patient received the Notice of Privacy Practices?
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.