Release of Protected Health Information (PHI) for Other Purposes and Activities

Compliance Manuals

1.1 Compliance Program Policy
1.2 Compliance Communication Policy
1.3 Compliance Reporting Policy
1.4 Compliance Confidentiality Policy
1.5 Compliance Record Maintenance Policy
1.6 Compliance Corrective Action Policy
1.7 Internal Compliance Investigation Policy
1.8 Response to an External Auditor/Investigation
1.9 Non-Retaliation and Non-Retribution for Reporting Policy
1.10 Compliance Committee Policy
2.6.C Patient Account Write Off and Adjustments Policy
2.7.D.3 Attachment “Incident to” Services
4.1.B.1 HIPAA/Privacy: General Rules – Minimum Necessary Uses and Disclosure of PHI for Routine Disclosure Policy
4.1.B.2 HIPAA/Privacy: General Rules – Minimum Necessary Uses and Disclosure of PHI for Non-Routine Disclosure Policy
4.1.C HIPAA/Privacy: General Rules – Providing Notice of Privacy Policy
4.1.D HIPAA/Privacy: General Rules – Safeguarding and Storing PHI Policy
4.2.A.2 HIPAA/Privacy: Uses and Disclosures of PHI – Disclosures to Law Enforcement Policy
4.2.A.3 HIPAA/Privacy: Uses and Disclosures – Uses and Disclosures of PHI Regarding Abuse, Neglect, or Violence Policy
4.3.A HIPAA/Privacy: Patient Rights – Patient Rights to Access PHI Policy
4.3.C HIPAA/Privacy: Patient Rights – Amendment of PHI
4.3.H HIPAA/Privacy: Privacy Response – Response and Reporting Policy
4.4.A HIPAA/Privacy: Other Requirements – Business Associate’s Policy
5.6 Release of Protected Health Information (PHI) Required by Law
9.3 OHSA Methods of Implementation and Control Policy
11.14 Personnel – Termination of Employment
Code of Conduct
Mission Statement
PCI DSS Acknowledgement Form
PCI DSS Payment Card Industry Data Security Standards
Time Clock Policy
Chronic Care Management

HIPAA/Privacy Documents

4.1.A HIPAA/Privacy: General Rules – Designated Record Set Policy
4.1.B.1 HIPAA/Privacy: General Rules – Minimum Necessary Uses and Disclosure of PHI for Routine Disclosure Policy
4.1.E HIPAA/Privacy: General Rules – Faxing PHI Policy
4.1.F HIPAA/Privacy: General Rules – Emailing PHI Policy
4.2.A HIPAA/Privacy: Uses and Disclosures – Uses and Disclosures of PHI/Authorization
4.2.A.1 HIPAA/Privacy: Uses and Disclosures of PHI – Disclosures to Parents/Authorized Representative Policy
4.2.A.2 HIPAA/Privacy: Uses and Disclosures of PHI – Disclosures to Law Enforcement Policy
4.2.A.3 HIPAA/Privacy: Uses and Disclosures – Uses and Disclosures of PHI Regarding Abuse, Neglect, or Violence Policy
4.2.A.4 HIPAA/Privacy: Uses and Disclosures – Uses and Disclosures of PHI for Public Health Purposes Policy
4.3.A HIPAA/Privacy: Patient Rights – Patient Rights to Access PHI Policy
4.3.B HIPAA/Privacy: Patient Rights – Accounting of Disclosures of PHI Policy
4.3.C HIPAA/Privacy: Patient Rights – Amendment of PHI
4.3.D HIPAA/Privacy: Patient Rights – Restrictions to Permitted Users and Disclosures of PHI Policy
4.3.E HIPAA/Breach Notification: Notification to Individuals (including Substitute Notice)
4.3.F HIPAA/Breach Notification: Termination of ePHI Access
4.3.G HIPAA/Privacy: Information System Activity Review
4.3.H HIPAA/Privacy: Privacy Response – Response and Reporting Policy
4.4.A HIPAA/Privacy: Other Requirements – Business Associate’s Policy
4.4.B HIPAA/Privacy: Other Requirements – Release of PHI Required by Law Policy
4.4.C HIPAA/Privacy: Other Requirements – Sanctions Policy
4.4.D. HIPAA/Privacy: Other Requirements – Verification of Identity and Authority of Officials Requesting PHI Policy
4.5.A HIPAA/Privacy: Other Requirements – Retention of PHI Policy
4.5.B HIPAA/Privacy: Other Requirements – Destruction of PHI Policy
4.5.C HIPAA/Privacy: Other Requirements – Destruction of PHI/Shred Bin Policy
Chronic Care Management

Employee Documents