Overview:
164.530(j)
Documentation.
All covered entities must have policies and procedures in place for maintaining documentation.
Action Items:
1) Obtain and review documentation that the covered entity maintains its policies and procedures, in written or electronic form, until 6 years after the later of the date of their creation or the last effective date.
2) Obtain and review documentation that the covered entity maintains all other documentation required by 164.530(j)(1) until 6 years after the later of the date of their creation or the last effective date.
Related Documents:
1) Documentation that the covered entity maintains its policies and procedures, in written or electronic form, until 6 years after the later of the date of their creation or the last effective date.
2) Documentation that the covered entity maintains all other documentation required by 164.530(j)(1) until 6 years after the later of the date of their creation or the last effective date.
Additional Guidance:
A covered entity must:
(i) Maintain the policies and procedures provided for in paragraph (i) of this section in written or electronic form;
(ii) If a communication is required by this subpart to be in writing, maintain such writing, or an electronic copy, as documentation; and
(iii) If an action, activity, or designation is required by this subpart to be documented, maintain a written or electronic record of such action, activity, or designation.
(iv) Maintain documentation sufficient to meet its burden of proof under ยง 164.414(b).
A covered entity must retain the documentation required by paragraph (j)(1) of this section for six years from the date of its creation or the date when it last was in effect, whichever is later.
Article ID: 605
Created: September 29, 2022
Last Updated: September 29, 2022
Author: Matthew Burdick
Online URL: http://www.compliancewiki.org/article/hipaa-privacy-documentation-164-530-j-605.html