Policy Manual sample

MDT Home Health Care Agency, Inc. Information Manager means an individual, corporate organization, business, or association that processes, stores or destroys personal health information for MDT Home Health Care Agency, Inc., or provides information management or information technology for MDT Home Health Care Agency, Inc. Designated Record set: shall mean a group of records maintained by or for our Agency that is (1) the medical records and billing records about individuals maintained by our Agency, (2) the admission, payment, claims adjudication, and case or medical management record system maintained by our Agency, or (3) used, in whole or in part, by or for our Agency to make decisions about individuals. Electronic Media: shall mean (1) electronic storage media including memory devices in computer (such hard disks), and any removable/transportable digital memory medium (such as magnetic tape, backup disk, optical disk, memory card, or (2) transmission media used to exchange information already storage media (such as internet (wide-open), extranet (using internet technology to link a business with information accessible only to collaborating parties), leased lines, dial-up lines, private networks, and the physical movement of removable/transportable electronic storage media. Certain transmissions, including paper, via facsimile, and of voice, via telephone, are not considered to be transmissions via electronic media, because the information being exchanged did not exist in electronic form before transmission. “HITECH Act” shall mean the Health Information Technology for Economic and Clinical Health (HITECH) Act and its implementing guidance and regulations, all as may be amended from time to time. POLICY: All MDT Home Health Care Agency, Inc. employees and Persons Associated with MDT Home Health Care Agency, Inc. are responsible for protecting the security of all personal health information (oral or recorded in any form) that is obtained, handled, learned, heard or viewed in the course of his or her work or association with MDT Home Health Care Agency, Inc. Personal health information shall be protected during its collection, use, storage and destruction within MDT Home Health Care Agency, Inc. Persons/positions authorized to release PHI/EPHI and confidential information of the Agency and agent acting on behalf of our Agency in accordance with a written contract must ensure the confidentiality of all patient identifiable information contained in the clinical record including OASIS data, and may not release patient identifiable information to the public. Use or disclosure of personal health information is acceptable only in the discharge of one’s responsibilities and duties (including reporting duties imposed by legislation) and based on the need to know. Discussion regarding personal health information shall not take place in the presence of persons not entitled to such information or in public places (elevators, lobbies, cafeterias, off premises, etc.) Home Health Agency Policies A-82