Vanderbilt University Medical Center
|
|
|
- Dwight Lawson
- 10 years ago
- Views:
Transcription
1 Vanderbilt University Medical Center Key Words: Photography, Videotaping Applicable to VUH Children s VMG VMG Off-site locations VPH VUSN VUSM Approved by Colleen Conway Welch, PhD CNM FAAN FANCMD April 2010 Nancy & Hilliard Travis Professor of Nursing Dean, Vanderbilt School of Nursing Marilyn Dubree, RN, MSN April 2010 Executive Chief Nursing Officer David Raiford, MD April 2010 Associate Vice Chancellor for Health Affairs Senior Associate Dean for Faculty Affairs C. Wright Pinson, MBA, MD April 2010 Deputy Vice Chancellor for Health Affairs CEO of the Hospitals and Clinics for VUMC Table of Contents I. Purpose:... 1 II. Policy:... 1 III. Definitions:... 2 IV. Specific Information:... 2 V. References: VI. Contributors: VII. Endorsements: I. Purpose: To define allowable purposes for obtaining film and digital photographs and video images or recordings of patients created using a camera or other device (defined collectively as Photography) at Vanderbilt University Medical Center (VUMC) and standards for the creation, use and retention of the images. II. Policy: VUMC may utilize Photography to collect protected patient health information for purposes of identification and patient care and treatment or as otherwise authorized by the patient or the patient s legal representative. Photography may be disallowed or discontinued at the discretion of the responsible health care provider when it may 2009 Vanderbilt University. All rights reserved. Inquiries: Accreditation & Standards (615)
2 interfere with patient care and/or is in the interest of patient safety, treatment, and/or healthcare operations and compliance. III. Definitions: A. Consent - written documentation of the patient s agreement to the Photography process (e.g. admission consent, specialized consent, or documentation of verbal consent). B. Person Identifiable Information - any piece of information which can potentially be used to uniquely identify, contact, or locate a single person. Such identifiers include, but are not limited to: name, home address, address, telephone number, social security number, medical record number, driver s license number, credit card number, biometric identifiers (including finger and voice prints), facial photos or images, or any unique characteristic (including unusual tattoos). C. Photography - for purposes of this policy the term Photography is used to include film and digital photographs or video images or recordings created using a camera or other device. D. Webcasting - broadcasting or distributing an audio and/or video file over the Internet using streaming media technology. E. Telemedicine - transferring medical information through phone, the Internet, or other networks for the purpose of delivering medical care or enhancing consultation between medical specialists. F. Teleconferencing - a live exchange of information between persons and machines remote from one another but linked by a telecommunications system, which often includes audio, video, and data services. IV. Specific Information: A. Circumstances under which Photography of Patients is Permissible 1. Patient Care and Identification Page 2 of 18
3 a. Patient consent to Photography used for purposes of identification, diagnosis and/or documentation of patient care is addressed in the consent paragraph contained in the applicable standard consent for treatment form: Consent for Treatment and Authorization for Release of Information; Consent for Treatment and Agreement to Pay (Adult); or Consent for Treatment and Agreement to Pay (Pediatric). b. When Photography is used for purposes of identification and/or to document patient care and treatment, the resulting images are included in the patient s medical record and appropriately labeled and indexed. Images taken for purposes of identification including scanned photo IDs are indexed as ID Photo. Images used to document patient care and/or treatments are indexed as Image (patient photo). c. Separate patient authorization is generally required for use of Photography for purposes other than treatment as specifically described below. 2. Video Surveillance to Monitor Clinical Condition a. Video observation of patients may be used in critical care, post-anesthetic recovery, and certain other clinical areas where continuous visual observation of the patient and bedside activity is deemed important to provide treatment and a safe and responsive environment of care for patients. b. Video monitors used for such surveillance are located at clinical workstations for viewing by hospital personnel only. c. Cameras may be temporarily turned off by staff to protect patient privacy during personal hygiene care (e.g. bathing, toileting). d. Clinical areas employing the use of video surveillance notify persons in family and visitor accessible areas of the unit that cameras are in use by posting signs regarding the use of the cameras in those areas. Page 3 of 18
4 Page 4 of 18
5 3. Documentation of Abuse and/or Neglect a. In cases of actual or suspected abuse and/or neglect, video surveillance or other Photography by authorized personnel may be used for medical documentation purposes. b. Authorization from the patient or other person(s) present in a patient s room or other area is not required prior to such authorized surveillance or Photography. c. Images recorded for documentation of abuse and/or neglect are not normally maintained as part of the patient s medical record unless the images are used for medical treatment purposes. Photography for documentation purposes other than treatment is maintained according to security protocols for storage, use, disclosure and retention as defined by the department authorized to engage in surveillance or Photography for this purpose. d. Copies of images captured under these circumstances may be released to authorized representatives of an investigating agency and/or pursuant to a subpoena or court order. 4. Requests by External Agencies or Law Enforcement When an outside party (e.g. an insurance company, investigator, law enforcement agency) requests patient Photography for purposes other than documentation of abuse and/or neglect (addressed above), the appropriate VUMC representative discusses the request with the patient/legal representative and obtains written consent. See section IV. B. below. Cross reference also OP , Releasing Patient Information and Coordinating Access to Patients by External Law Enforcement Officials and Investigators. 5. Clinical Research Photography may not be used for research purposes without the approval of the VUMC Institutional Review Board. The patient s Page 5 of 18
6 consent to Photography is required to be included in the patient consent for participation in the research protocol. Page 6 of 18
7 6. Education or Teaching Purposes a. Photography that does not contain any Person Identifiable Information may be used for education and teaching purposes without patient/legal representative authorization. b. The written consent of the subject(s) of Photography is required prior to creating Photography that will include Person Identifiable Information for use in education and/or teaching. c. If the patient/legal representative is not able or present to provide the consent at the time of creation of the Photography, such written authorization for the use of the Photography is required prior to using any existing images. See section IV. B. below. 7. Publications for External Distribution a. Photography that does not contain any Person Identifiable Information or any associated Person Identifiable text may be published in textbooks, journal articles and other externally distributed publications without patient/legal representative authorization and without a Business Associate Agreement with the publisher. b. The written consent of the subject(s) of Photography is required prior to creating Photography that will include Person Identifiable Information for use in textbooks, journal articles or other externally distributed publications. c. If the patient/legal representative is not able or present to provide the consent at the time of creation of the Person Identifiable Photography and/or associated Person Identifiable text, such written authorization for the use of the Photography and/or text is required prior to using any existing images or text. d. A written contract with the publisher of any external publication containing Person Identifiable Photography Page 7 of 18
8 and/or text must be executed by an authorized official of VUMC and must include a HIPAA compliant Business Associate Agreement. 8. Trauma Certification and Performance Improvement Purposes a. Photography, particularly videotaping, may be obtained for training and/or performance improvement without advance patient/patient representative authorization; however, images that include Person Identifiable Information may not be used prior to securing patient/legal representative authorization. See section IV. B. below. b. The images recorded for performance improvement or trauma certification purposes are not part of the patient s medical record and are maintained according to security protocols for storage, use, disclosure and retention as defined by the department and only as necessary for peer review or performance improvement files as defined under TCA and are not subject to release to any parties. 9. Telemedicine, Teleconferencing, or Webcasting a. Use of Photography in connection with telemedicine or teleconferencing is limited to transmission through secure networks or using encryption of the images to protect the patient s privacy and integrity of the data. b. Use of Photography in telemedicine for treatment purposes does not require additional authorization by the patient. c. The written consent of the subject(s) of Photography is required prior to the transmission and/or use of images that will include Person Identifiable Information for teleconferencing purposes other than treatment. d. Photography that does not contain any Person Identifiable Information may be used for teleconferencing without patient/legal representative authorization. Page 8 of 18
9 e. Photography used for Webcasting must be fully de-identified of any elements of Person Identifiable Information. Patient images created for or used in Telemedicine or Teleconferencing must be de-identified before using the images in a Webcast. 10. Photography by Family/Friends a. Consent is not needed for Photography done by the patient s family members or friends. However, the Photography must not interfere with patient care and the physician or other health care provider or nurse has the authority to instruct that the Photography be discontinued if deemed necessary in the interest of patient care, respect for privacy and/or dignity of the patient or others, or for efficient hospital operations. b. Video monitoring by family/friends in a patient s room must be approved by the bedside nurse. The family/friends are informed that the camera or monitor must be focused only on the patient and cannot be placed in a position that captures staff or other patients or activities in the room. c. Photography by a patient/family taken under circumstances causing concern to staff/faculty for any reason should be reported to the Office of Patient Affairs or the Administrative Coordinator (AC). Risk Management, General Counsel, and the Administrative Director of the area are notified as appropriate. 11. Photography of Newborns and the Delivery a. VUMC protects the confidentiality of the patient and newborn, while preserving and supporting the patient s decision to record the birth process. b. Patients and/or family members are generally allowed to photograph or video record deliveries in accordance with limitations specified by the mother and with the agreement of the attending health care providers in conjunction with the Page 9 of 18
10 Labor & Delivery unit policy, videotaping/photography During Childbirth. c. The patient and family members may be asked and are expected to comply with the request to discontinue recording at any time if the attending physician, nursing or staff deems it necessary. d. Written consent of the parent must be obtained prior to taking of photographs of newborns as a courtesy or for sale. Consent to release the newborn information to the vendor providing the service is secured using the Patient Authorization for Security Photographs form (MC3642). 12. Courtesy Photography Programs Made Available to Patients/Families a. Consent is not needed for Photography of a patient and/or a patient s family as part of a program or service offering made available as a courtesy to patients and families. Examples include: Holiday Photos, Family Photo Night, or Bereavement Photos. b. Participation by patients and/or families in courtesy photography programs is voluntary. c. Images produced as part of these courtesy programs are not maintained by VUMC and do not become part of the patient s medical record. 13. Requests for Marketing/Publicity/Media Purposes a. Photography for purposes of marketing, publicity, or other media uses is coordinated through the News & Public Affairs Office consistent with policy OP Media Access. b. A representative designated by News & Public Affairs discusses the request with the patient/legal representative and obtains written consent using the Media Relations- Authorization to Create, Use, or Disclose Photographs or Page 10 of 18
11 Videos for Media Releases and Public Relations form (MC6690). The signed consent is kept on file in the News & Public Affairs Office. The designated photographer must sign the Confidentiality Agreement for Media which is also kept on file in the Media Department. B. Documentation of Consent/Authorization to Photography 1. Patient or Patient s Legal Representative s Consent a. Generally, the patient/legal representative should give written consent before Photography is carried out by anyone other than a friend or family member of the patient. Exceptions (e.g. treatment) are delineated in earlier sections of this policy. b. The appropriate authorization form that has been signed and dated by the patient/legal representative or used to document verbal consent as noted below is retained in the patient s medical record. A new authorization form is required for each new series of images taken. i. Permission to Take and Use Photographs or Videos (MC3930): used for Photography for education/training, performance improvement, or for other non-media related acceptable purposes; ii. Media Relations-Authorization to Create, Use, or Disclose Photographs or Videos for Media Releases and Public Relations (MC6690): used for public relations, media, and marketing purposes coordinated through VU Media and Public Relations staff; iii. Patient Authorization for Security Photographs (MC3642): used exclusively in the newborn nursery areas. c. When consent from a patient s legal representative is obtained verbally by phone, such consent is audibly witnessed by at least two VUMC staff members and documented on the appropriate authorization form. Page 11 of 18
12 d. The authorization for use of the Photography remains valid unless and until the patient/legal representative withdraws or restricts the authorization for future use. Photography obtained prior to the revocation of the consent and made part of the patient s medical record shall be maintained as a part of the VUMC legal medical record. 2. Family or Other Visitors Captured in the Photography a. Family members, friends, or other visitors that may be captured in Photography for treatment or other internal use such as education and training must be given an opportunity to move out of the range of the image. b. Individual consents from each person captured in large group Photography to be used for internal uses and limited educational non-commercial uses is not required so long as the individuals have been notified and given the opportunity to move out of the range of the image. c. If a family member or other visitor is to be featured in Photography as an individual, written consent from that person is necessary. 3. VUMC Workforce Members Captured in Patient Photography a. A VUMC Workforce Member is an individual performing work on behalf of VUMC and under the direct control of VUMC, whether or not the member is employed by VUMC. Examples include staff; faculty, temporary agency workers, students, contractors, and volunteers. b. Photography of staff/faculty during the performance of patient care or procedures is not permitted, except when the Photography is being taken for educational/training purposes and the staff/faculty has been informed that performance of patient care may be filmed for this purpose. c. Written consent from the workforce member is not required so long as the member has been notified in advance that Page 12 of 18
13 Photography for internal use such as educational/training purposes may occur in the work area. Acceptance of a work assignment in the area where Photography is expected conveys implied consent and waiver of any ownership rights or rights to compensation associated with use of the Photography. Page 13 of 18
14 C. Camera and Recording Equipment Requirements 1. The VUMC staff or faculty member taking the Photography is accountable for using a camera device that is capable of downloading from the camera and uploading to StarPanel in a webfriendly image format. 2. Personnel who take Photography are responsible for deleting the images from the camera device used to the take the Photography as soon as the images have been recorded in the patient s medical record or alternative secure location, or when the image is no longer needed for the purpose for which it was created. D. Storage and Retention of Images and/or Recordings 1. Digital images taken by or on behalf of VUMC for treatment or other medical purposes are promptly uploaded to the patient s electronic medical record, except when the department or service that creates the image has a policy for alternative documentation and retention due to the sensitive nature of the subject of the image, or unique technical requirements. When the digital image is not stored in the patient s medical record, it must be stored in a secure database and the specific location must be documented in the patient s medical record. 2. Full motion video or video streaming is not uploaded to StarPanel. Video recording must be maintained in a separate system or file (e.g. PACS or a media server). Discrete video segments limited to seconds running time may be uploaded to StarPanel after confirmation from Medical Informatics Officer that it will not derogate the performance of the electronic medical record system. 3. Still photographs and other images taken for treatment or other medical purposes are scanned into the patient s medical record for safekeeping. 4. Every image stored in the patient s medical record contains the patient s name and medical record number. Page 14 of 18
15 5. All images stored in the patient s medical record or alternative database include the date and time that the Photography was obtained and the name of the person who created the image. 6. Regardless of the modality and equipment used to take and retain images, all such images are and remain the property of VUMC and are not the property of the workforce member making the image. E. Use and/or Disclosure of Photography Images 1. Viewing is limited to authorized staff based upon a need to know and consistent with the minimum necessary standard. 2. Images captured in the Photography should include no more than the minimum necessary direct personal identifiers. For example, do not use identifiers such as name, birth date, social security number, medical record number, home address or phone number except to the extent use of these identifiers is necessary to accomplish the purpose of the Photography. 3. Except for purposes of treatment or health care operations or unless otherwise required by law, patient identifiable Photography will not be released to outside requestors without specific authorization from the patient/legal representative. F. Behaviors related to Photography of Patients that are not Permissible by VUMC Staff or Faculty 1. Personal use of Photography of patients. 2. Use of patient Photography for entertainment purposes. 3. Posting Photography of patients in public areas or on internet websites or blogs without written or documented verbal consent from the patient/legal representative prior to the posting. 4. Malicious use. 5. Including others (besides the consenting patient) in the Photography without consent. Page 15 of 18
16 6. Use of Photography to defame VUMC. 7. Taking Photography in a way that is disruptive to patient care or the work environment. 8. Taking any photos without the individual s consent except as delineated in earlier sections of this policy. 9. Surreptitious recording or Photography except for cases covered in IV. A, Taking or participating in Photography without respect for patient privacy and/or dignity. 11. Including in the Photography more patient identification information than is minimum necessary (e.g. SSN, phone number). G. Staff, house staff, and/or faculty failing to comply with this policy are subject to disciplinary action as defined in the VUMC policy OP , Sanctions for Privacy and Information Security Violations. V. References: VUMC Operations Policies. Retrieved January 21, 2020 from OP Media Access OP Use and Disclosure of Protected Health Information OP De-Identification of Protected Health Information OP Releasing Patient Information and Coordinating Access to Patients by External Law Enforcement Officials and Investigators OP Sanctions for Privacy and Information Security Violations OP Protection and Security of Protected Health Information VUMC Forms Management. Retrieved February 11, 2010 from MC 3642 Patient Authorization for Security Photographs Page 16 of 18
17 MC6690 Media Relations-Authorization to Create, Use, or Disclose Photographs or Videos for Media Releases and Public Relations VUMC Patient Care E-Docs. Retrieved April 27, 2010 from MC 3930 Permission to Take and Use Photographs or Videos TCA Page 17 of 18
18 VI. Contributors: Lead Author: Content Experts: Gaye Smith, Privacy & Health Record Official Susan Hannasch, University Counsel Susan Hernandez, Admin. Dir., Inpt. Nursing, Children s Diane Moat, Ass t. Dir., Clinical Risk Management Lee Ann Ruffing, Director of Operations, Children s Racy Peters, Director of Access Mgmt., VMG Devin Carr, Admin Dir., Surgery & Trauma PCC Mary Lou Farinaro, Dir. of Operations, VPH VII. Endorsements: Children s Hospital s Practice Policy Committee April 2009 Nursing Administrative Board June 2009 Information Privacy and Security Executive Committee October 2009 Health Record Executive Committee November 2009 Medical Center Medical Board February 2010 Kevin Churchwell, MD April 2010 Executive Director & CEO, MCJCHV Larry Goldberg April 2010 Executive Director & CEO, VUH David Posch April 2010 CEO, The Vanderbilt Clinic Page 18 of 18
Policy Title/Number: Message Baskets OP 10-40.40
Policy Title/Number: Message Baskets OP 10-40.40 Manual: Categories: Contributors: Review Responsibility: Operations Policy Manual Information Management Raychel Enck, EMR Specialist Debra Grimes, Director,
Information Security Policy
Information Security Policy Policy Title Responsible Executive Responsible Office Information Security Policy Vice President for Information Technology and CIO, Jay Dominick Office of Information Technology,
DALLAS ALLERGY & ASTHMA CENTER
DALLAS ALLERGY & ASTHMA CENTER Gary N. Gross, MD Michael E. Ruff, MD 5499 Glen Lakes Dr., Suite 100 Dallas, TX 75231 Dania A. Wierzbicki, MD Phone: (214) 691-1330 Jane Zepeda, PA-C FAX: (214) 691-6405
STANDARD ADMINISTRATIVE PROCEDURE
STANDARD ADMINISTRATIVE PROCEDURE 16.99.99.M0.26 Investigation and Response to Breach of Unsecured Protected Health Information (HITECH) Approved October 27, 2014 Next scheduled review: October 27, 2019
Vail Valley Medical Center Policy
Vail Valley Medical Center Policy TITLE: HIPAA - Photographing, Video Recording, Audio Recording, and Other Imaging of Effective Date: November 13, 2012 Status: Final Replaced: New Policy Purpose: 1. To
SOUTHLAKE DERMATOLOGY 1170 N. Carroll Ave. Southlake, TX 76092 www.southlakedermatology.com Main 817-251-6500 Fax 817-442-0550
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. EFFECTIVE September 15, 2014 This Notice of
UNIVERSITY OF ROCHESTER INFORMATION TECHNOLOGY POLICY
PURPOSE The University of Rochester recognizes the vital role information technology plays in the University s missions and related administrative activities as well as the importance in an academic environment
R345, Information Technology Resource Security 1
R345, Information Technology Resource Security 1 R345-1. Purpose: To provide policy to secure the private sensitive information of faculty, staff, patients, students, and others affiliated with USHE institutions,
DEPARTMENTAL POLICY. Northwestern Memorial Hospital
Northwestern Memorial Hospital DEPARTMENTAL POLICY Subject: DEPARTMENTAL ADMINISTRATION Title: 1 of 11 Revision of: NEW Effective Date: 01/09/03 I. PURPOSE: This policy defines general behavioral guidelines
Contra Costa Community College District Business Procedure 10.57 SECURITY CAMERA OPERATING PROCEDURE
Contra Costa Community College District Business Procedure 10.57 SECURITY CAMERA OPERATING PROCEDURE The District and its colleges are committed to enhancing the quality of life of the community by integrating
Virginia Commonwealth University School of Medicine Information Security Standard
Virginia Commonwealth University School of Medicine Information Security Standard Title: Scope: Data Handling and Storage Standard This standard is applicable to all VCU School of Medicine personnel. Approval
Policy Title/Number: Horizon Documentation System Downtime CL 20-06.17. Nancy Rudge, RN Sara Seaman, RN Nola Vest, RN, MSN
Policy Title/Number: Horizon Documentation System Downtime CL 20-06.17 Manual: Categories: Contributors: Review Responsibility: Clinical Policy Manual Documentation Karen Hughart, RN, MSN Nancy Rudge,
INDIANA UNIVERSITY SCHOOL OF OPTOMETRY HIPAA COMPLIANCE PLAN TABLE OF CONTENTS. I. Introduction 2. II. Definitions 3
INDIANA UNIVERSITY SCHOOL OF OPTOMETRY HIPAA COMPLIANCE PLAN TABLE OF CONTENTS I. Introduction 2 II. Definitions 3 III. Program Oversight and Responsibilities 4 A. Structure B. Compliance Committee C.
UNIVERSITY PHYSICIANS OF BROOKLYN, INC. POLICY AND PROCEDURE. No: Supersedes Date: Distribution: Issued by:
UNIVERSITY PHYSICIANS OF BROOKLYN, INC. POLICY AND PROCEDURE Subject: ALCOHOL & SUBSTANCE ABUSE INFORMATION Page 1 of 10 No: Prepared by: Shoshana Milstein Original Issue Date: NEW Reviewed by: HIPAA Policy
NOTICE OF PRIVACY PRACTICES Walter Chiropractic Clinic, 5219 Peters Creek Rd Ste 5, Roanoke VA 24019
Effective Date: 5/18/15 NOTICE OF PRIVACY PRACTICES Walter Chiropractic Clinic, 5219 Peters Creek Rd Ste 5, Roanoke VA 24019 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
HIPAA-G04 Limited Data Set and Data Use Agreement Guidance
HIPAA-G04 Limited Data Set and Data Use Agreement Guidance GUIDANCE CONTENTS Scope Reason for the Guidance Guidance Statement Definitions ADDITIONAL DETAILS Additional Contacts Web Address Forms Related
APPROVED BY: DATE: NUMBER: PAGE: 1 of 9
1 of 9 PURPOSE: To define standards for appropriate and secure use of MCG Health electronic systems, specifically e-mail systems, Internet access, phones (static or mobile; including voice mail) wireless
RUTGERS POLICY. Policy Name: Standards for Privacy of Individually Identifiable Health Information
RUTGERS POLICY Section: 100.1.9 Section Title: HIPAA Policies Policy Name: Standards for Privacy of Individually Identifiable Health Information Formerly Book: 00-01-15-05:00 Approval Authority: RBHS Chancellor
Montclair State University. HIPAA Security Policy
Montclair State University HIPAA Security Policy Effective: June 25, 2015 HIPAA Security Policy and Procedures Montclair State University is a hybrid entity and has designated Healthcare Components that
HIPAA and Privacy Policy Training
HIPAA and Privacy Policy Training July 2015 1 This training addresses the requirements for maintaining the privacy of confidential information received from HFS and DHS (the Agencies). During this training
Winthrop-University Hospital
Winthrop-University Hospital Use of Patient Information in the Conduct of Research Activities In accordance with 45 CFR 164.512(i), 164.512(a-c) and in connection with the implementation of the HIPAA Compliance
Bates Technical College. Information Technology Acceptable Use Policy
Bates Technical College Information Technology Acceptable Use Policy Consistent with policy adopted by the Board of Trustees, Bates Technical College, hereinafter referred to as the College, has a commitment
USER AGREEMENT FOR: ELECTRONIC DEALINGS THROUGH THE CUSTOMS CONNECT FACILITY
USER AGREEMENT FOR: ELECTRONIC DEALINGS THROUGH THE CUSTOMS CONNECT FACILITY CONDITIONS OF USE FOR ELECTRONIC DEALINGS THROUGH THE CUSTOMS CONNECT FACILITY Between: the Commonwealth of Australia, acting
Policies and Procedures Audit Checklist for HIPAA Privacy, Security, and Breach Notification
Policies and Procedures Audit Checklist for HIPAA Privacy, Security, and Breach Notification Type of Policy and Procedure Comments Completed Privacy Policy to Maintain and Update Notice of Privacy Practices
Donna S. Sheperis, PhD, LPC, NCC, CCMHC, ACS Sue Sadik, PhD, LPC, NCC, BC-HSP Carl Sheperis, PhD, LPC, NCC, MAC, ACS
Donna S. Sheperis, PhD, LPC, NCC, CCMHC, ACS Sue Sadik, PhD, LPC, NCC, BC-HSP Carl Sheperis, PhD, LPC, NCC, MAC, ACS 1 DISCLAIMER Please review your own documentation with your attorney. This information
DISCLAIMER HEALTH INFORMATION PRIVACY POLICIES & PROCEDURES
DISCLAIMER This web site is provided for information and education purposes only. No doctor/patient relationship is established by your use of this site. No diagnosis or treatment is being provided. The
BEFORE THE BOARD OF COUNTY COMMISSIONERS FOR MULTNOMAH COUNTY, OREGON RESOLUTION NO. 05-050
BEFORE THE BOARD OF COUNTY COMMISSIONERS FOR MULTNOMAH COUNTY, OREGON RESOLUTION NO. 05-050 Adopting Multnomah County HIPAA Security Policies and Directing the Appointment of Information System Security
HIPAA-P06 Use and Disclosure of De-identified Data and Limited Data Sets
HIPAA-P06 Use and Disclosure of De-identified Data and Limited Data Sets FULL POLICY CONTENTS Scope Policy Statement Reason for Policy Definitions ADDITIONAL DETAILS Web Address Forms Related Information
Computer Security Incident Response Plan. Date of Approval: 23- FEB- 2015
Name of Approver: Mary Ann Blair Date of Approval: 23- FEB- 2015 Date of Review: 22- FEB- 2015 Effective Date: 23- FEB- 2015 Name of Reviewer: John Lerchey Table of Contents Table of Contents... 2 Introduction...
HIPAA Audit Risk Assessment - Risk Factors
I II Compliance Compliance I Compliance II SECTION ONE COVERED ENTITY RESPONSIBILITIES AREA ONE Notice of Privacy Practices 1 Is your full notice of privacy practices given to every new patient in your
ROYAL AUSTRALASIAN COLLEGE OF SURGEONS
1. SCOPE This policy details the College s privacy policy and related information handling practices and gives guidelines for access to any personal information retained by the College. This includes personal
Metropolitan Living, LLC 151 W. Burnsville Parkway, Suite 101 Burnsville, MN 55337 Ph: (952) 564-3030 Fax: (651) 925-0031
The Health Insurance Portability and Accountability Act (HIPAA) and Client Privacy Statement This notice describes how your medical information may be used and disclosed and how you can get access to this
Health Insurance Portability and Accountability Policy 1.8.4
Health Insurance Portability and Accountability Policy 1.8.4 Appendix C Uses and Disclosures of PHI Procedures This Appendix covers procedures related to Uses and Disclosures of PHI. Disclosures to Law
HIPAA PRIVACY NOTICE PLEASE REVIEW IT CAREFULLY
HIPAA PRIVACY NOTICE THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN OBTAIN ACCESS TO THIS INFORMATION. INTRODUCTION PLEASE REVIEW IT CAREFULLY Moriarty
Network Security Policy
Network Security Policy I. PURPOSE Attacks and security incidents constitute a risk to the University's academic mission. The loss or corruption of data or unauthorized disclosure of information on campus
HIPAA BUSINESS ASSOCIATE AGREEMENT
HIPAA BUSINESS ASSOCIATE AGREEMENT THIS BUSINESS ASSOCIATE AGREEMENT (hereinafter Agreement ) is between COVERED ENTITY NAME (hereinafter Covered Entity ) and BUSINESS ASSOCIATE NAME (hereinafter Business
MCCP Online Orientation
Objectives At the conclusion of this presentation, students will be able to: Describe the federal requirements of the HIPAA/HITECH regulations that protect the privacy and security of confidential data.
Federal Trade Commission Privacy Impact Assessment
Federal Trade Commission Privacy Impact Assessment for the: W120023 ONLINE FAX SERVICE December 2012 1 System Overview The Federal Trade Commission (FTC, Commission or the agency) is an independent federal
Photography Policy. Videography Policy
Photography Policy The Office of University Marketing provides photographic coverage limited to noteworthy events taking place on the Stetson University campus for use in marketing materials. Because of
Patient Privacy and HIPAA/HITECH
Patient Privacy and HIPAA/HITECH What is HIPAA? Health Insurance Portability and Accountability Act of 1996 Implemented in 2003 Title II Administrative Simplification It s a federal law HIPAA is mandatory,
How To Write A Health Care Security Rule For A University
INTRODUCTION HIPAA Security Rule Safeguards Recommended Standards Developed by: USF HIPAA Security Team May 12, 2005 The Health Insurance Portability and Accountability Act (HIPAA) Security Rule, as a
HEALTH INSURANCE PORTABILITY & ACCOUNTABILITY ACT OF 1996 HIPAA
TRAINING MANUAL HEALTH INSURANCE PORTABILITY & ACCOUNTABILITY ACT OF 1996 HIPAA Table of Contents INTRODUCTION 3 What is HIPAA? Privacy Security Transactions and Code Sets What is covered ADMINISTRATIVE
Virginia Commonwealth University Police Department
Virginia Commonwealth University Police Department NUMBER SECTION CHIEF OF POLICE EFFECTIVE REVIEW DATE 2 9 1/2013 2/2013 SUBJECT SOCIAL MEDIA GENERAL The department endorses the secure use of social media
EXAMINATION OUTLINE FOR PRIVATE INVESTIGATORS
EXAMINATION OUTLINE FOR PRIVATE INVESTIGATORS 2014 I. Ethics (18%) This area assesses the candidate s ability to comply with ethical standards of private investigators regarding privacy rights, confidentiality,
HENRY COUNTY POLICIES AND PROCEDURES FOR COMPLIANCE WITH THE HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT OF 1996 HIPAA
HENRY COUNTY POLICIES AND PROCEDURES FOR COMPLIANCE WITH THE HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT OF 1996 HIPAA 1 Amended January 23, 2014 This HIPAA compliance manual was prepared for the
acknowledgment of health center privacy policy, privacy practices, and privacy procedures PATIENT PRIVACY
LAST NAME FIRST NAME OF BIRTH 001 acknowledgment of health center privacy policy, privacy practices, and privacy procedures PATIENT PRIVACY! HOPE s PRIVACY ACKNOWLEDGMENT PAGE 1 OF 1 HOPE s Statement of
Connecticut Pipe Trades Health Fund Privacy Notice. 2013 Restatement
Connecticut Pipe Trades Health Fund Privacy Notice 2013 Restatement Section 1: Purpose of This Notice and Effective Date THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
Preservation and Production of Electronic Records
Policy No: 3008 Title of Policy: Preservation and Production of Electronic Records Applies to (check all that apply): Faculty Staff Students Division/Department College _X Topic/Issue: This policy enforces
Sarasota Personal Medicine 1250 S. Tamiami Trail, Suite 202 Sarasota, FL 34239 Phone 941.954.9990 Fax 941.954.9995
Sarasota Personal Medicine 1250 S. Tamiami Trail, Suite 202 Sarasota, FL 34239 Phone 941.954.9990 Fax 941.954.9995 NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY
Valdosta State University. Information Resources Acceptable Use Policy
Valdosta State University Information Resources Acceptable Use Policy Date: December 10, 2010 1. OVERVIEW... 3 2. SCOPE... 3 3. DESIGNATION OF REPRESENTATIVES... 3 3.1 UNIVERSITY PRESIDENT... 3 3.2 VICE
PRIVACY AND INFORMATION SECURITY INCIDENT REPORTING
PRIVACY AND INFORMATION SECURITY INCIDENT REPORTING PURPOSE The purpose of this policy is to describe the procedures by which Workforce members of UCLA Health System and David Geffen School of Medicine
Tulane University. Tulane University Business Associates Agreement SCOPE OF POLICY STATEMENT OF POLICY IMPLEMENTATION OF POLICY
Tulane University DEPARTMENT: General Counsel s POLICY DESCRIPTION: Business Associates Office -- HIPAA Agreement PAGE: 1 of 1 APPROVED: April 1, 2003 REVISED: November 29, 2004, December 1, 2008, October
Area Specific Labor and Delivery
Policy Title/Number: Manual: Guidelines for Electronic Documentation and Fetal Monitor Strip Storage and Archive in the GE QS System CL NEW Area Specific Labor and Delivery Categories: Contributors: Elizabeth
YU General Guidelines for Use of Social Media
INTRODUCTION AND SCOPE General Guidelines for Use of Social Media Social media can be a valuable and powerful means of communication. Yeshiva University and its constituent schools (collectively, the University
Patterson Dental Supply, Inc. Sample HIPAA Notice of Privacy Practices for its Dental Practice Customers. Last Updated April 1, 2010
Patterson Dental Supply, Inc. Sample HIPAA Notice of Privacy Practices for its Dental Practice Customers Last Updated April 1, 2010 This sample HIPAA Notice of Privacy Practices is being provided by Patterson
KESWICK MULTI-CARE CENTER, INC. NOTICE OF PRIVACY PRACTICES
KESWICK MULTI-CARE CENTER, INC. NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW
4. No accounting of disclosures is required with respect to disclosures of PHI within a Limited Data Set.
IDAHO STATE UNIVERSITY POLICIES AND PROCEDURES (ISUPP) HIPAA Privacy - Limited Data Sets and Data Use Agreements 10200 POLICY INFORMATION Major Functional Area (MFA): MFA X - Office of General Counsel
SUBJECT: INFORMATION TECHNOLOGY RESOURCES I. PURPOSE
Page 1 of 8 I. PURPOSE To outline the University's policies for students, faculty, staff and others, concerning the use of the University's computing and communication resources, including those dealing
RUTGERS POLICY. Responsible Office: RBHS Office of Ethics, Compliance & Corporate Integrity
RUTGERS POLICY Section: 100.1.3 Section Title: HIPAA Policies Policy Name: Accounting Disclosures of Health Information Formerly Book: 00-01-15-20:00 Approval Authority: RBHS Chancellor Responsible Executive:
AGREEMENT FOR ACCESS TO PROTECTED HEALTH INFORMATION BETWEEN WAKE FOREST UNIVERSITY BAPTIST MEDICAL CENTER AND
AGREEMENT FOR ACCESS TO PROTECTED HEALTH INFORMATION BETWEEN WAKE FOREST UNIVERSITY BAPTIST MEDICAL CENTER AND THIS AGREEMENT for Access to Protected Health Information ( PHI ) ( Agreement ) is entered
Computer, Communication, and Network Technology Acceptable Use
Policy V. 2.10.2 Responsible Official: Dean of University Libraries and Chief Information Officer Effective Date: April 12, 2010 Computer, Communication, and Network Technology Acceptable Use Policy Statement
Network Security Policy
Network Security Policy Policy Contents I. POLICY STATEMENT II. REASON FOR POLICY III. SCOPE IV. AUDIENCE V. POLICY TEXT VI. PROCEDURES VII. RELATED INFORMATION VIII. DEFINITIONS IX. FREQUENTLY ASKED QUESTIONS
POLICIES AND REGULATIONS Policy #78
Peel District School Board POLICIES AND REGULATIONS Policy #78 DIGITAL CITIZENSHIP Digital Citizenship Digital citizenship is defined as the norms of responsible behaviour related to the appropriate use
University Healthcare Physicians Compliance and Privacy Policy
Page 1 of 11 POLICY University Healthcare Physicians (UHP) will enter into business associate agreements in compliance with the provisions of the Health Insurance Portability and Accountability Act of
CREATIVE SOLUTIONS IN HEALTHCARE, INC. Privacy Policy
CREATIVE SOLUTIONS IN HEALTHCARE, INC. Privacy Policy Amended as of February 12, 2010 on the authority of the HIPAA Privacy Officer for Creative Solutions in Healthcare, Inc. TABLE OF CONTENTS ARTICLE
BILLING INFORMATION AND ASSIGNMENT OF BENEFITS
BILLING INFORMATION AND ASSIGNMENT OF BENEFITS Facility: Northpoint Radiation Center Pro Physicians Clinic PA Physician: Timothy D. Nichols, M.D. PA, Board Certified Radiation Oncology Wilhelm J. Lubbe,
BUSINESS ASSOCIATE AGREEMENT
BUSINESS ASSOCIATE AGREEMENT Please complete the following and return signed via Fax: 919-785-1205 via Mail: Aesthetic & Reconstructive Plastic Surgery, PLLC 2304 Wesvill Court Suite 360 Raleigh, NC 27607
HIPAA POLICIES & PROCEDURES AND ADMINISTRATIVE FORMS TABLE OF CONTENTS
HIPAA POLICIES & PROCEDURES AND ADMINISTRATIVE FORMS TABLE OF CONTENTS 1. HIPAA Privacy Policies & Procedures Overview (Policy & Procedure) 2. HIPAA Privacy Officer (Policy & Procedure) 3. Notice of Privacy
Identity Theft Prevention and Security Breach Notification Policy. Purpose:
Identity Theft Prevention and Security Breach Notification Policy Purpose: Lahey Clinic is committed to protecting the privacy of the Personal Health Information ( PHI ) of our patients and the Personal
The Health and Benefit Trust Fund of the International Union of Operating Engineers Local Union No. 94-94A-94B, AFL-CIO. Notice of Privacy Practices
The Health and Benefit Trust Fund of the International Union of Operating Section 1: Purpose of This Notice Notice of Privacy Practices Effective as of September 23, 2013 THIS NOTICE DESCRIBES HOW MEDICAL
The Practical Guide to HIPAA Privacy and Security Compliance
The Practical Guide to HIPAA Privacy and Security Compliance By Kevin Beaver and Rebecca Herold Published by Auerbach Publications in December 2003 TABLE OF CONTENTS SECTION 1 HIPAA ESSENTIALS 1 Introduction
Kiran Mishra, Ph.D. Licensed Clinical Psychologist. Sugar Land, TX 77478 (832) 876-3232 TEXAS NOTICE FORM
Kiran Mishra, Ph.D. Licensed Clinical Psychologist 1111 Highway 6, Suite 235 Sugar Land, TX 77478 (832) 876-3232 TEXAS NOTICE FORM Notice of Psychologists Policies and Practices to Protect the Privacy
