HIPAA Security
Sets out how the Agency keeps electronic patient information confidential, accurate, and available: the risk analysis and risk management plan, access control, rules for laptops, tablets, and phones used at the point of care, OASIS transmission, backups and the contingency plan, business associates, device disposal, and incident response.
About this policy
- Policy number
- TX-HH-PRV-02
- Version
- 1.0
- Main rule
- 45 CFR §§164.302-164.318
- Library
- Texas home health · 56 policies
- Category
- Privacy
- Sections
- 20
In short
- Lock your laptop, tablet, or phone with a PIN or password, and never share your log-in.
- Use only the Agency’s approved apps for patient information. No personal texts, email, or photo gallery.
- Never leave a device in a patient’s home or visible in your car.
- Report a lost or stolen device or a strange email or link to the office right away.
- Return all Agency devices on your last day.
What's inside
20 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR §§164.302-164.318)
- 5. Risk Analysis and Risk Management
- 6. Security Measures
- 7. Point-of-Care Devices, Computers, and Passwords
- 8. OASIS Transmission
- 9. Security Incidents
- 10. Contingency Plan and Backup
- 11. Business Associates
- 12. Devices, Media, and Disposal
- 13. Staff Training
- 14. Responsibilities
- 15. Records and Compliance Monitoring
- 16. References
- 17. Related Policies and Forms
- 18. Approval
- 19. Revision History
An inspector may ask
- Show me your most recent security risk analysis and your risk management plan.
- How do you remove a clinician’s access to the electronic record when they leave?
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.