HIPAA Privacy and OASIS Confidentiality
Explains who may see or receive a patient’s health information and when, the patient’s privacy rights and the time limits for each, the Notice of Privacy Practices and the OASIS privacy notice, the extra confidentiality of OASIS data, Texas rules on electronic disclosure and training, and how staff protect privacy in the home.
About this policy
- Policy number
- TX-HH-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR Part 164 Subpart E
- Library
- Texas home health · 56 policies
- Category
- Privacy
- Sections
- 16
In short
- Share patient information only with the patient, people they approved, the care team, and the doctor.
- Give the Notice of Privacy Practices, and the OASIS privacy notice when OASIS is collected, at the start of care.
- Send anyone else who asks, including police or lawyers, to the office.
- Never post about a patient on social media, even without a name.
- Tell the Privacy Official at once about any lost folder, wrong fax, or other privacy mistake.
What's inside
16 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR Part 164 Subpart E)
- 5. OASIS Confidentiality
- 6. When Patient Information May Be Shared
- 7. Patient Privacy Rights
- 8. Procedure
- 9. Staff Training
- 10. Responsibilities
- 11. Records and Compliance Monitoring
- 12. References
- 13. Related Policies and Forms
- 14. Approval
- 15. Revision History
An inspector may ask
- Show me the Notice of Privacy Practices this patient received and the acknowledgment. Where is the OASIS privacy notice?
- Who is your Privacy Official? How do staff report a privacy problem?
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.