Overview:
§164.522(a)(3)
Implementation specification: Documentation.
A covered entity must document a restriction in accordance with § 164.530(j) of this subchapter.
Action Items:
1) Obtain and review policies and procedures for documenting restriction requests and maintaining those documented restrictions.
Related Documents:
1) Policies and procedures for documenting restriction requests and maintaining those documented restrictions.
Additional Guidance:
A covered entity must maintain, until six years after the later of the date of their creation or last effective date, its privacy policies and procedures, its privacy practices notices, disposition of complaints, and other actions, activities, and designations that the Privacy Rule requires to be documented.
Article ID: 561
Created: September 29, 2022
Last Updated: September 29, 2022
Author: Matthew Burdick
Online URL: http://www.compliancewiki.org/article/hipaa-privacy-documentation-164-522-a-3-561.html