HIPAA Privacy and Ohio Confidentiality Laws
Sets the Agency's rules for protecting the privacy of patients' and families' health information under the HIPAA Privacy Rule (45 CFR Part 164 Subpart E) and the Ohio laws that add to it: the privacy official, the Notice of Privacy Practices, when information may be used or shared, minimum necessary, authorizations, the extra Ohio protections for HIV test information and for Medicaid recipients' information, patients' rights of access, amendment and accounting, safeguards in homes and facilities, complaints and sanctions.
About this policy
- Policy number
- OH-HSP-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR Part 164 Subpart E
- Library
- Ohio hospice · 60 policies
- Category
- Privacy
- Sections
- 29
In short
- Look at and share only the patient information you need for your job.
- Ask the patient whom you may talk to about his or her care, and write the answer in the record.
- Never post about patients on social media or take photos of patients on a personal phone.
- HIV test information needs special written permission before it can be shared outside the care team.
- Give every new patient the Notice of Privacy Practices and ask for a signed acknowledgment.
- Report any privacy problem to the privacy official, Lee Sample, the same day.
What's inside
29 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR Part 164 Subpart E; OAC 3701-19-23(D))
- 5. Privacy Official and Contact Person
- 6. Notice of Privacy Practices
- 7. When Information May Be Used or Shared
- 8. Minimum Necessary
- 9. Authorizations
- 10. Ohio Laws That Add to HIPAA
- 10.1 Ohio protected health information law
- 10.2 HIV test results and AIDS diagnoses
- 10.3 Ohio Medicaid recipients
- 10.4 Substance use disorder treatment records
- 10.5 Ohio hospice confidentiality training
- 11. Patients' Rights Over Their Information
- 11.1 Personal representatives and deceased patients
- 12. Protecting Information in Homes, Facilities and the Community
- 13. Business Associates
- 14. Complaints, Sanctions, Mitigation and No Retaliation
- 15. Changes in Federal Privacy Rules
- 16. Responsibilities
- 17. Records and Compliance Monitoring
- 18. Staff Training
- 19. References
- 20. Related Policies and Forms
- 21. Approval
- 22. Revision History
An inspector may ask
- Who is your privacy official, and how does a patient make a privacy complaint?
- Show me the signed acknowledgment of your Notice of Privacy Practices for this patient, or the record of your good-faith effort.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.