Overview:
§164.528(d)
Implementation specification: Documentation.
A covered entity must document the following and retain the documentation as required by §164.530(j):
(1) the information required to be included in an accounting under paragraph (b) of this section for disclosures of protected health information that are subject to an accounting under paragraph (a) of this section;
(2) the written accounting that is provided to the individual under this section; and
(3) the titles of the persons or offices responsible for receiving and processing requests for an accounting by individuals.
Action Items:
1) Obtain and review policies and procedures related to documentation of accountings of disclosures for consistency with the established performance criterion.
Related Documents:
1) Policies and procedures related to documentation of accountings of disclosures for consistency with the established performance criterion.
Additional Guidance:
A covered entity must maintain, until six years after the later of the date of their creation or last effective date, its privacy policies and procedures, its privacy practices notices, disposition of complaints, and other actions, activities, and designations that the Privacy Rule requires to be documented.
Article ID: 576
Created: September 29, 2022
Last Updated: September 29, 2022
Author: Matthew Burdick
Online URL: http://www.compliancewiki.org/article/hipaa-privacy-documentation-164-528-d-576.html