Protect health information where HIPAA applies

Insurance privacy and health information policy, §3.4

For a confirmed covered entity or business associate, map the applicable Privacy Rule duties to notices, permitted uses, individual rights and business-associate arrangements. Assess Security and Breach Notification Rules separately. Keep uncovered insurance lines distinct.

Event-driven

Before a covered health-information use and when coverage changes

For a confirmed covered entity or business associate, map the applicable Privacy Rule duties to notices, permitted uses, individual rights and business-associate arrangements. Assess Security and Breach Notification Rules separately. Keep uncovered insurance lines distinct.

• HIPAA role determination and privacy-control register

  Controlled record with date, owner, source and review history

Health privacy officer

Leela can prepare a draft and evidence checklist for the accountable reviewer. Adoption and legal conclusions require human review.

Tell Leela about your company to see whether this applies.