15-J-2
Protection of the Record
Policy
LifeCare recognizes the confidential nature of the clinical record and will protect all clinical records from loss, destruction and unauthorized use. To meet this objective, a comprehensive HIPAA Compliance Plan exists which is designed to protect the clinical record and Protected Health Information. This includes:
Administrative Safeguards: This includes administrative actions, policies and pro cedures to prevent, detect, contain and correct security violations. Administrative safeguards involve the selection, development, implementation and maintenance of security measures to protect ePHI and to manage the conduct of our workforce in relation to the protection of that information.
Physical Safeguards: These safeguards are physical measures, policies and procedures to protect electronic information systems and related buildings and equipment from natural and environmental hazards and unauthorized intrusion.
Organizational Standards: These standards address the contract requirement with Business Associates that will have access to ePHI and outline the specific criteria required for written contracts or other arrangements.
Policies and Procedures: Reasonable and appropriate policies and procedures to comply with the Security Rule.
All staff will be made aware of current policies, practices and procedures through initial orientation, annual updates and interim notifications when necessary.
Please Also See
Authorization for Release of Information
HIPAA For Therapists
Standard
15-J-2 The organization recognizes the confidentiality of clinical record information and provides safeguards against loss, destruction, or unauthorized use. Written procedures govern the use and removal of records and the conditions for release of information. The patient's written consent is required for release of information not authorized by law. 485.721(a) Standard
