HIPAA Privacy - Documentation 164.522(a)(3)

Overview:
§164.522(a)(3)
Implementation specification: Documentation.
A covered entity must document a restriction in accordance with § 164.530(j) of this subchapter.

Action Items:
1) Obtain and review policies and procedures for documenting restriction requests and maintaining those documented restrictions.

Related Documents:
1) Policies and procedures for documenting restriction requests and maintaining those documented restrictions.

Additional Guidance:
A covered entity must maintain, until six years after the later of the date of their creation or last effective date, its privacy policies and procedures, its privacy practices notices, disposition of complaints, and other actions, activities, and designations that the Privacy Rule requires to be documented.