HIPAA Privacy, Confidentiality, and the EPD Waiver Privacy Plan
Names the privacy official, gives every patient the Notice of Privacy Practices at the first visit, limits uses and disclosures of patient information to what HIPAA and District law allow, protects privacy in patients’ homes and on phones, honors patients’ privacy rights, serves as the privacy plan required for EPD Waiver services, and sanctions staff who break the rules.
About this policy
- Policy number
- DC-HH-PRV-01
- Version
- 1.0
- Main rule
- 45 CFR Part 164 Subpart E
- Library
- Washington, DC home health · 58 policies
- Category
- Privacy
- Sections
- 27
In short
- Give every new patient the Notice of Privacy Practices at the first visit and ask them to sign that they received it.
- Look only at the records of patients you care for, and share only what the task needs.
- Never text, email, or photograph patient information on a personal phone or account. Use only the Agency’s apps.
- Talk about care where others cannot hear, and ask the patient before discussing care in front of visitors.
- Report any privacy problem at once to the privacy official, Lee Sample.
What's inside
27 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR Part 164 Subpart E; 22-B DCMR §3910.1(a))
- 5. The Privacy Official
- 6. Notice of Privacy Practices
- 7. How Patient Information May Be Used and Shared
- 7.1 Treatment, payment, and health care operations
- 7.2 Minimum necessary
- 7.3 Without authorization, as the law allows
- 7.4 With the patient’s authorization
- 7.5 Family, friends, and caregivers
- 8. Privacy Rights of Patients
- 9. Privacy in the Patient’s Home and in the Field
- 10. Mental Health and Other Specially Protected Information
- 11. Business Associates
- 12. The EPD Waiver Privacy Plan
- 13. Safeguards, Sanctions, and Mitigation
- 14. Privacy Complaints
- 15. Responsibilities
- 16. Records and Compliance Monitoring
- 17. Staff Training
- 18. References
- 19. Related Policies and Forms
- 20. Approval
- 21. Revision History
An inspector may ask
- Who is your privacy official? Show me the designation.
- Show me the Notice of Privacy Practices and this patient’s signed acknowledgment, or your record of a good-faith effort to get one.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.