HIPAA Privacy Officer Policy Template

Description

The HIPAA Privacy Officer Policy Template is an essential tool for helping organizations comply with HIPAA regulations. As a covered entity or business associate you must designate an individual to manage all privacy-related activities and comply with regulations. Our template provides you with the mechanism to make sure your company is compliant by adding an individual to handle these activities.

This policy template includes the requirements of having employees adhere to all Privacy Rules and establishes the duties, roles and responsibilities of the Privacy Officer in administering them. It also outlines the compliance process for issue resolution, incident reporting and enforcement protocols for dealing with violations. The template also specifies how employees should communicate information about privacy policies to ensure that everyone is aware of their rights under HIPAA.

SAMPLE TEXT: ENTITY NAME has adopted this Privacy-Official Policy in order to recognize the requirement to comply with the Health Insurance Portability and Accountability Act (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health (“HITECH”) Act of 2009 (Title XIII of division A and Title IV of division B of the American Recovery and Reinvestment Act “ARRA”) and the HIPAA Omnibus Final Rule (Effective Date: March 26, 2013). We acknowledge that full compliance with the HIPAA Final Rule is required by or before September 23, 2013.

ENTITY NAME hereby acknowledges our duty and responsibility to protect the privacy and security of Individually Identifiable Health Information (“IIHI”) generally, and Protected Health Information (“PHI”) as defined in the HIPAA Regulations, under the regulations implementing HIPAA, other federal and state laws protecting the confidentiality of personal information, and under principles of general and professional ethics. We also acknowledge our duty and responsibility to support and facilitate the timely and unimpeded flow of health information for lawful and appropriate purposes.