HIPAA - Patient Privacy and Security / Guidance and Policies

The following information will help guide you through your confidentiality questions as well as information on the UCLA Release of Information website. (http://pmo.mednet.ucla.edu/)

Privacy and Security Guide for UCLA Workforce

• HIPAA and California Privacy Laws
• Privacy Alert 2009 (Email Notice)
• Privacy Alert AB211 & SB541
• Office of the Governor Press Release re: AB211 & SB541 (09/30/08)
  
  
• A Health Care Provider's Guide To the HIPAA Privacy Rule
• A Patient's Guide To the HIPAA Privacy Rule
  

UCLA Health System Privacy Policies

Patient Privacy Rights

• HS 9401  Protection of Confidential Patient Information (Protected Health Information (PHI))
• HS 9410  Registration: Terms and Conditions of Service
• HS 9411  Notice of Privacy Practices
• HS 9412  Authorization for Use/Disclose of Protected Health Information (PHI)
• HS 9413  Patient Access to Protected Health Information (PHI)
• HS 9414  Request for Special Restrictions on Use/ Disclosure of (PHI)
• HS 9415  Request for Amendment of Protected Health Information (PHI)
• HS 9416  Request for Accounting of Disclosures
• HS 9417  Management of Patient / Family / Visitor Complaints and Grievances

PHI Management

• HS 9420  Medical Records
• HS 9421  Employee Access to and Use of Protected Health Information (PHI) (Minimum Necessary Standard)
• HS 9422  Disclosure of Protected Health Information to Third Parties
• HS 9423  Records Retention
• HS 9424  Records Storage and Destruction

Privacy-Compliance

• HS 9430  Business Associates
• HS 9460  Privacy and Security Training and Education Plan
• HS 9490  Mitigation Policy
• HS 9491  Specific Audit of Protected Health Information (PHI) Access

Visitor Process Policy

• Processes to Ensure Visitors, Students, or Other Observers are HIPAA - Compliant and Maintain the Privacy of UCLA Patients

Privacy-Marketing, Fundraising & Media Relations

• HS 9470  Use of Protected Health Information (PHI) for Marketing Purposes
• HS 9471  Use of Protected Health Information (PHI) for Fundraising
• HS 9472  Permissible Disclosures of Protected Health Information ( PHI) to the Public and the Media

Research

• HS 9440  Release of Protected Health Information for Research Purposes

Security

• HS 9453A  Use of Electronic Mail (E-Mail) in Communication of Patient Identifiable Health Information (Protected Health Information)
• HS 9453-B Facsimile Transmission of Patient Identifiable Health Information (Protected Health Information)
• HS 9451  Use of Electronic Information by UCLA Healthcare Workforce (Employees)
• HS 9452  Collection and Use of Patient Identifiable Health Information On PDAs, Laptops and Other Portable Computing Devices
• HS 9453  Security And Confidentiality
• HS 9457 Information Technology Security Policy