Administrative Requirements (Privacy)

Overview:§164.530(d)(1)Standard: Complaints to the covered entity.A covered entity must provide a process for individuals to make complaints concerning the covered entity's policies and procedures required by this subpart and subpart D of this... Read More

Overview:§164.530(j)(1)Standard: Documentation.A covered entity must: (i) Maintain the policies and procedures provided for in paragraph (i) of this section in written or electronic form; (ii) If a communication is required by this subpart to be in... Read More

Overview:§164.530(f)Standard: Mitigation.A covered entity must mitigate, to the extent practicable, any harmful effect that is known to the covered entity of a use or disclosure of protected health information in violation of its policies and... Read More

Overview:(a)(1) Standard: Personnel designations.(i) A covered entity must designate a privacy official who is responsible for the development and implementation of the policies and procedures of the entity.(ii) A covered entity must designate a... Read More

Overview:§164.530(i)(1)Standard: Policies and procedures.A covered entity must implement policies and procedures with respect to protected health information that are designed to comply with the standards, implementation specifications, or other... Read More

Overview:§164.530(g)Standard: Refraining from intimidating or retaliatory acts.A covered entity (1) May not intimidate, threaten, coerce, discriminate against, or take other retaliatory action against any individual for the exercise by the... Read More

Overview:§164.530(c)(1)Standard: Safeguards.A covered entity must have in place appropriate administrative, technical, and physical safeguards to protect the privacy of protected health information.(2)(i) Implementation specification: Safeguards. A... Read More

Overview:§164.530(e)(1)Standard: Sanctions.A covered entity must have and apply appropriate sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity or the requirements of this... Read More

Overview:§164.530(b)(1)Standard: Training.A covered entity must train all members of its workforce on the policies and procedures with respect to protected health information required by this subpart and subpart D of this part, as necessary and... Read More

Overview:§164.530(h)Standard: Waiver of rights.A covered entity may not require individuals to waive their rights under § 160.306 of this subchapter, this subpart, or subpart D of this part, as a condition of the provision of treatment, payment,... Read More