HIPAA Security
Explains how the Agency keeps electronic client records safe: passwords, locked phones and computers, who has access, backups, and what staff do when a device is lost or something looks wrong, applying the HIPAA Security Rule and the Texas duty to protect sensitive personal information.
About this policy
- Policy number
- TX-PRV-02
- Version
- 1.0
- Main rule
- 45 CFR §§164.302-164.318
- Library
- Texas home care · 46 policies
- Category
- Privacy
- Sections
- 20
In short
- Lock your phone with a PIN or fingerprint and keep it updated. Never let anyone else use your work apps.
- Use only the approved work apps for client information. Never use regular texts, personal email, or social media.
- Use your own login and a strong password. Never share it, and never use it for personal accounts.
- If your phone is lost or stolen, or you clicked a strange link, call the office right away, day or night.
- Do not save client papers, photos, or screenshots on your phone. Return all work devices on your last day.
What's inside
20 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR §§164.302-164.318)
- 5. Risk Analysis and Risk Management
- 6. Security Measures
- 7. Phones, Computers, and Passwords
- 8. Security Incidents
- 9. Contingency Plan and Backup
- 10. Business Associates
- 11. Devices, Media, and Disposal
- 12. Staff Training
- 13. Responsibilities
- 14. Records and Documentation
- 14.1 Compliance Monitoring
- 15. References
- 16. Related Policies and Forms
- 17. Approval
- 18. Revision History
An inspector may ask
- Show me your most recent security risk analysis and the plan that came out of it.
- How do you remove an attendant’s access to your scheduling and visit verification apps when the attendant leaves?
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.