Privacy and Confidentiality of Client Information
Sets how the Agency protects client information: when HIPAA applies, the privacy official, the minimum necessary rule, when information may be shared with family, case managers and others, the Notice of Privacy Practices, the client's rights to see, copy, amend and get an accounting of their information with the federal time limits, personal representatives, privacy in the client's home, business associates, complaints, sanctions and the Medicaid confidentiality rules that bind ODA and ODM providers.
About this policy
- Policy number
- OH-HC-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR §164.502
- Library
- Ohio home care · 49 policies
- Category
- Privacy
- Sections
- 22
In short
- Share client information only with people who need it to care for the client, and only what they need.
- Do not talk about clients in public, with other clients or with your own family. Never post about a client online.
- If someone asks about a client by phone, check who they are and refer them to your supervisor if unsure.
- Give each new client the Notice of Privacy Practices and ask them to sign that they received it.
- Questions or problems go to the privacy official, Lee Sample.
What's inside
22 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR §164.502)
- 5. When HIPAA Applies
- 6. The Privacy Official
- 7. Using and Sharing Client Information
- 8. Minimum Necessary
- 9. Notice of Privacy Practices
- 10. The Client's Privacy Rights
- 11. Privacy in the Client's Home and in the Community
- 12. Business Associates
- 13. Privacy Complaints, Retaliation and Waivers
- 14. Sanctions and Mitigation
- 15. Responsibilities
- 16. Records and Compliance Monitoring
- 17. Staff Training
- 18. References
- 19. Related Policies and Forms
- 20. Approval
- 21. Revision History
An inspector may ask
- Who is your privacy official, and how does a client reach that person?
- Show me this client's signed acknowledgment of your Notice of Privacy Practices.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.