HIPAA Privacy and Ohio Confidentiality Laws
Protects the privacy of patients’ health information under the HIPAA Privacy Rule, the home health Conditions of Participation and Ohio’s confidentiality laws for HIV test results and diagnoses and for Medicaid recipient information. Names the Privacy Official, sets out when information may be shared, lists patients’ privacy rights and the time frames for each, keeps OASIS data confidential, and requires a Notice of Privacy Practices, training, sanctions and business associate agreements.
About this policy
- Policy number
- OH-HH-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR §164.530
- Library
- Ohio home health · 59 policies
- Category
- Privacy
- Sections
- 18
In short
- Share patient information only with the care team, the patient and the people the patient has approved, and only what is needed.
- Give every new patient the Notice of Privacy Practices and the OASIS privacy notice, and get the acknowledgment signed.
- HIV information and Medicaid information have extra protection in Ohio. Never share them outside the care team without the Privacy Official.
- Never post about a patient on social media, even without a name, and take photos only in the approved app.
- Send requests from police, lawyers, insurers or reporters to the office. Report any privacy mistake at once.
What's inside
18 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR §164.530)
- 5. OASIS Confidentiality
- 6. When Patient Information May Be Shared
- 7. Information with Extra Protection in Ohio
- 8. Patient Privacy Rights
- 9. Procedure
- 10. Notice of Privacy Practices
- 11. Responsibilities
- 12. Records and Compliance Monitoring
- 13. Staff Training
- 14. References
- 15. Related Policies and Forms
- 16. Approval
- 17. Revision History
An inspector may ask
- Who is your Privacy Official? Show me your Notice of Privacy Practices and where it is posted.
- Show me this patient’s signed acknowledgment of the Notice of Privacy Practices and the OASIS privacy notice.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.