Model policy · version 1
Draft
Insurance privacy and health information
Control personal information, consumer rights and covered health data.
What’s in this policy5 sections · Insurance privacy and health information · Read the full policy
4Obligations · things you must do
4Evidence · records that prove it
2Monitoring · checks and deadlines
0Reporting · reports you must send
Does this apply to you?
Answer a few questions and each obligation is marked applies, likely, or needs more information.
Tell Leela about your companyHand over the whole policy
Every obligation in this policy, in one request.
What the policy requires
Automate
Leela can perform the work through your connected systems.
Monitor
Leela can watch for the trigger, keep the clock, and flag what is late.
Prepare for review
Leela can prepare the artifact and hand it to a person for review.
Human required
A person must do the work; Leela can track it and file the evidence.
TriggerEvent-driven · At a new data use, product or sharing arrangement
EvidenceData map and applicability assessment
TriggerEvent-driven · When a notice, consumer choice or information-rights request is triggered
EvidenceNotice version, delivery evidence and rights-request log
TriggerEvent-driven · Before a new disclosure and during risk-based reviews
EvidenceDisclosure review and provider restrictions
TriggerEvent-driven · Before a covered health-information use and when coverage changes
EvidenceHIPAA role determination and privacy-control register