Appalachian District Health Department

Policy and Procedure Policy Name HIPAA Policy Topic Designation of a Privacy Officer

Section 800

Approved Date: 4-14-03

Chapter 801

Revision Date: 2-22-2013

Purpose: To meet requirements of Regulation 45 CFR 164.530. Policy: The HIPAA Officer is responsible for the development and implementation of policies and procedures to safeguard the privacy of patients’ health information consistent with federal and state laws and regulations. Procedure: The specific responsibilities of the HIPAA Officer include: • • • • • •

Developing policies and procedures for protected health information privacy and security Developing and conducting training programs on privacy policies and procedures Responding to questions from staff and patients concerning privacy policies and procedures Receiving complaints concerning the privacy practices described in the Notice of Privacy Practices Auditing compliance with privacy policies and procedures if necessary Investigating and correcting violations of privacy policies and procedures

The HIPAA Officer may assign any of these responsibilities to other staff members or contractors, but continues to be responsible for making sure these responsibilities are carried out. Regulation 45 CFR 164.530(a)(1)

Requires designation of a privacy official responsible for development and implementation of privacy policies and procedures and a contact person or office responsible for providing further information and receiving complaints about privacy practices.

1|HIPAA – Designation of a Privacy Officer