This HIPAA Hardware and Media Accountability Policy Template is in Microsoft Word (.docx) format for easy editing. Each template is guaranteed to be fully HIPAA & HITECH compliant when properly implemented.
HIPAA Hardware and Media Accountability Policy Template
Secure your company’s data with the HIPAA Hardware and Media Accountability Policy Template. Protect company data and investments by maintaining records with this template to help assure compliance in protecting information held electronically. This template provides comprehensive information such as person responsible for movements of hardware and electronic media, equipment item, action taken (transfer, disposal or release), date of transfer/disposal/release, person received/authorized to receive equipment, and comments.
Utilizing this template is a simple process that will help you meet HIPAA compliance while keeping thorough records of any sensitive data within your company’s possession. Get on track to recording all forms of transfers or disposals regarding hardware and any other digital media with this customizable policy template.
SAMPLE TEXT: ENTITY NAME has adopted this Hardware and Media Accountability Policy in order to recognize the requirement to comply with the Health Insurance Portability and Accountability Act (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health (“HITECH”) Act of 2009 (Title XIII of division A and Title IV of division B of the American Recovery and Reinvestment Act “ARRA”) and the HIPAA Omnibus Final Rule (Effective Date: March 26, 2013). We acknowledge that full compliance with the HIPAA Final Rule is required by or before September 23, 2013.
ENTITY NAME hereby acknowledges our duty and responsibility to protect the privacy and security of Individually Identifiable Health Information (“IIHI”) generally, and Protected Health Information (“PHI”) as defined in the HIPAA Regulations, under the regulations implementing HIPAA, other federal and state laws protecting the confidentiality of personal information, and under principles of general and professional ethics. We also acknowledge our duty and responsibility to support and facilitate the timely and unimpeded flow of health information for lawful and appropriate purposes.
|Applicable Section(s)|| |