HIPAA Privacy and North Carolina Confidentiality Laws
Names the Privacy Official, sets out how the Agency gives the Notice of Privacy Practices and gets the acknowledgment, when staff may share health information with family, physicians, facilities and others, how patients and personal representatives use their HIPAA rights (access within 30 days, amendment and accounting within 60 days), and how North Carolina's own confidentiality rules (the patient rights statute, the right to object to state review, and the security of original records) fit in.
About this policy
- Policy number
- NC-HSP-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR §164.530
- Library
- North Carolina hospice · 60 policies
- Category
- Privacy
- Sections
- 25
In short
- Look up only the patients you are caring for or working on. Curiosity look-ups are violations.
- Share with family and friends only what relates to their part in the patient's care, and respect anyone the patient asked you not to tell.
- Never post about patients, families or deaths on social media, even without a name.
- Give the Notice of Privacy Practices at admission and get Form NC-HSP-PRV-01-A signed, or write down why not.
- Send requests for copies, subpoenas and police requests to the Privacy Official, Lee Sample. Copies of a record are due within 30 days.
- Report any privacy worry to the Privacy Official at once. No one is punished for reporting in good faith.
What's inside
25 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR §164.530)
- 5. Privacy Official and Complaint Contact
- 6. Notice of Privacy Practices
- 6.1 Content of the notice
- 7. Using and Sharing Health Information
- 7.1 Privacy in the home and in facilities
- 7.2 Minimum necessary and role-based access
- 7.3 Substance use disorder records
- 8. Patients' HIPAA Rights
- 8.1 Requests about a deceased patient
- 9. North Carolina Confidentiality Duties
- 10. Business Associates
- 11. Workforce Training, Sanctions and Mitigation
- 12. Privacy Complaints
- 13. Responsibilities
- 14. Records and Compliance Monitoring
- 15. Staff Training
- 16. References
- 17. Related Policies and Forms
- 18. Approval
- 19. Revision History
An inspector may ask
- Who is your privacy official? How do patients complain about privacy?
- Show me the Notice of Privacy Practices and the signed acknowledgment in this record.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.