HIPAA General - Statusfi (ICS)

Global HIPAA Requirements

The HIPAA Compliance Officer has been appointed and documented (may also serve as the HIPAA Privacy Officer and/or HIPAA Security Officer)

Read more: Creating A Culture of Compliance, Ask Paxson?

A written training program has been developed for the training of all employees on all aspects of HIPAA specific to your practice.

Read more: HIPAA Training Materials, ICS HIPAA On-Demand Courses, Ask Paxson?

Employee HIPAA training logs are kept, documenting that training has occurred for each employee.

Read more: HIPAA Training Materials, HIPAA Basics for Chiropractic Team Members, Ask Paxson?

A written sanction policy is is in the HIPAA manual and effectively communicated so that all staff understand the consequences of failing to comply with the security policies and procedures related to offsite use of, or access to Electronic Protected Health Information (EPHI).

Read more: HIPAA Training Materials, HIPAA Security Rule Guidance, Ask Paxson?

Right of Access

A written policy is established requiring response to individuals’ access requests ASAP but no longer than 30 calendar days, with a single allowable 30-day limited extension if the individual is notified in writing of the reason and date of completion.

Read more: Medical Records Access and Fees, HIPAA access guidance, Ask Paxson?

A written policy is established that individuals may request their PHI in a specific form and format and direct it to another person or entity via a written, signed request that clearly identifies the recipient and delivery address (including electronic), if readily producible.

Read more: Medical Records Access and Fees, HIPAA access to information, Ask Paxson?

A written policy is established that individuals may not be required to submit a HIPAA authorization form to access their own records and that verification of identity must be reasonable, may not delay or block access, and may be completed verbally or in writing using accessible submission methods such as in person, email, or secure portal.

Read more: Authorization vs. Right of Access, HIPAA access guidance., Medical Records Access and Fees, Ask Paxson?

A written policy is established, limiting patient requested PHI copy fees to either: (1) reasonable, cost-based charges based on the provider’s exact cost for labor, supplies, and postage, or (2) a flat fee not to exceed $6.50 for electronic copies of electronic records, and requiring advance notice to the individual of any applicable fee.

Read more: Medical Records Access and Fees, HIPAA Access Guidance, Ask Paxson?

A written policy is established prohibiting per-page fees for electronic copies of PHI provided under the individual’s right of access.

Read more: Medical Records Access and Fees, HIPAA Privacy Rule: Access, Ask Paxson?

A reference list [1] is available that identifies electronic forms and delivery methods (e.g., PDF, XML, patient portal, encrypted email, unencrypted email with acknowledgment, USB drive, CD) to assist staff in determining whether a requested format is readily producible.

Read more: Medical Records Access and Fees, HIPAA Privacy Rule: Access to PHI, Ask Paxson?

Staff is trained on the individual’s legal right to access all PHI in the designated record set, including directing delivery to a third party, requesting specific formats, and using any offered request method.

Read more: Medical Records Access and Fees, HIPAA access guidance, Ask Paxson?

Staff is trained that requesting patient identity verification must be reasonable and may not create barriers or delay access, and may be completed verbally or in writing, provided the written form can be submitted in person, by email, secure portal, or other accessible means.

Read more: Medical Records Access and Fees, HIPAA access guidance, Ask Paxson?

HIPAA General Requirements

HIPAA General Requirements

HIPAA Overall

Global HIPAA Requirements

Right of Access

What’s Next?

Congratulations!

HIPAA General Requirements

HIPAA General Requirements

HIPAA Overall

Global HIPAA Requirements

Right of Access

My Settings

What’s Next?

Congratulations!