HIPAA Tip: Get Rolling on Policies and Forms Practice
The HIPAA Privacy Rule took effect on April 14 this year. Did you develop the necessary policies and forms?
While HIPAA involves a number of important tasks, there are three important polices/forms to understand: Privacy Policy, Acknowledgement Form, and Authorization Form. Make sure these are in place so you are in compliance with HIPAA standards.
Privacy Policy (Note of Privacy Policy)
This policy must disclose how you use patient identifiable information and who has access to it. The policy should describe the details about: information you collect, how the information is used, how the practice safeguards patient information, and the patient's right to restrict use of information. Contact your attorney for development input. He/she will have access to the privacy statues in your state and remember: the more stringent policy (HIPAA or your state) prevails.
Acknowledgement of Privacy Policy Form
Practices are required to make the best efforts to have patients sign, acknowledging receipt of the privacy policy. If patients refuse to sign, staff may note as such on the form, sign, and date themselves, then file in the patient's chart. The acknowledgment is good on file for seven years. Many practices are combining this form with a communications preference form where patients note if acceptable to have appointment reminder massages, which phone number they prefer to be used (work vs. home. vs. cell), and if it is OK to discuss their account/conditions/care with any family members.
Authorization Form
An authorization form is not required for disclosures that result from treatment, payment or operations, but is required if you plan to use patient identifiable information for use in marketing or clinical trials. Authorization forms specify the specific use of information and have an expiration date.
Click here for a sample authorization form from HHS
|
