HIPAA Policies and Procedures
Every Covered Entity and Business Associate should have a comprehensive set of HIPAA Security Rule and Privacy Rule policies and procedures.
You probably learned about these at new employee orientation, during annual refresher training and when there were any changes to policies and procedures.
Some ways that Policies and Procedures are made available to employees are:
- Document Management System
- Employee Handbook
- Hard Copy Binders
- Department-specific procedures may be on posters throughout the department or in binders at the nurses’ stations
The following people should be able to assist you in obtaining copies of these important documents, or answering any questions you may have.
- Privacy Officer
- Security Officer
- Head of HR