HIPAA Documents

Advisorys & Articles

1. Action Kit: HIPAA Privacy Rule—Consent is Key 
2. Arnold & Porter Advisory 
3. Bulletin on Regulating the Electronic Transfer of Health Information 
4. Bulletin on Regulating the Privacy of Individual Health Information 
5. Documentation Issues for Emergency Hospital Admission 
6. Documentation Issues for Skilled Nursing Providers 
7. Executive Summary on HIPAA 
8. Peer Review Records: "Does HIPAA Provide Back Door Access to Peer Review Records?"

Assessments

1. Data Privacy and Security Considerations 
2. HIPAA Assessment Questions 
3. HIPAA Privacy Standards Assessment Questionnaire / Gap Analysis Grid 
4. Information Systems 
5. Internal Assessment Tool 
6. Inventory of Privacy Policies 
7. Privacy Considerations 
8. Privacy Assessment Form
9. Preliminary HIPAA Assessment 

Charts & Documents

1. Business Associates Letter 
2. Chart-HIPAA Responsibility 
3. Chart-"What do I need to use or disclose this information?" 
4. Chart-"Who is a covered entity?" 
5. Chart-HIPAA Gantt Chart for Privacy Standards 
6. Chart-HIPAA Quick Reference 
7. Charts on Impact of HIPAA 
8. Communication & Training Plan 
9. Communication Paper for HIPAA 
10. Email Usage 
11. HIPAA Summary 
12. HIPAA Topic Review 
13. Index to Final HIPAA Privacy Regulations 
14. Inventory of Privacy Regulations Groupings 
15. Policy & Written Plan 
16. Privacy Log 
17. Privacy Standards Subteam Charter 
18. Privacy Team Deliverables 
19. Privacy Tool: Privacy Regulations HIPAA- Administrative Simplification Internal Assessment 
20. Summary of Privacy Rule Policy Requirements 
21. Transaction & Code Sets Objectives 
22. Uses & Disclosures Group Charter 
23. Work Plan

Contracts & Forms

1. Assessment Services Agreement 
2. Assurance Regarding Use and Disclosure of Protected Health Information Covered by an Alteration or Waiver of Authorization for Use or Disclosure 
3. Authorization Form D for the Use and Disclosure of PHI Created for Research that Includes Treatment 
4. Authorization Form for Disclosure of Protected Health Information 
5. Authorization for Use and Disclosure of Existing Health Information in Connection with Research Approved by [IRB] 
6. Authorization for Use and Disclosure of Health Information Created for Research Approved by [IRB] 
7. Authorization for Use and Disclosure of PHI for Reasons Other than Treatment, Payment or Healthcare Operations 
8. Business Associate Agreements 
9. Business Associate Contract 
10. Business Associate Agreement Addendum 
11. Business Associate Provision 
12. Certification for Use or Disclosure of Protected Health Information for the Purpose of Review Preparatory to Research 
13. Certification for Use or Disclosure of Protected Health Information of Deceased Individuals 
14. Consent Form 
15. Computer Access & Confidentiality Agreement 
16. Designation of Affiliates and Components as a Single Covered Entity 
17. Demand for Removal of Legally Protected Material from a Website 
18. "General Authorization" for Disclosure of PHI for Treatment, Payment and Healthcare Operations 
19. HIPAA Business Associate Amendment 
20. HIPAA Vendor Letter 
21. Notice of Privacy Practices 1 
22. Notice of Privacy Practices 2 
23. PHI Amendments Form 
24. PHI Disclosure Log 
25. Privacy Checlist 
26. Short Form Business Associate Agreement

Job Descriptions

1. Chief HIPAA Officer 
2. Corporate Compliance Officer/(Chief) Privacy Officer 
3. Corporate Privacy Officer 
4. Position Statement for Privacy Official 
5. Privacy and Security Program Directory 
6. Privacy Officer Job Description 
7. Privacy Official Description

Policies & Procedures 

1. Access and Amendment of Individually Identifiable Health Information
2. Accommodating Patients Requesting to Amend or Correct Their Health Record 
3. Application of the Minimum Necessary Standard to the Use & Disclosure of Protected Health Information 
4. Collection and Disclosure of PHI on Personal Digital Assistants, and on PCs 
5. Collection, Storage and Disclosure of Personal Health Information to Ensure Patient’s Rights to Privacy 
6. Confidential Information 
7. Disclosure of De-identified Information 
8. Documentation of IRB Approval of Alteration or Waiver of Authorization for Use or Disclosure of Protected Health Information for Research 
9. Facsimile Policy 
10. From One Covered Entity to Another Covered Entity for Requests Made by an Individual for Disclosure of His or Her Own PHI 
11. Confidentiality of Protected Patient Health and Financial Information 
12. Patient Access to Health Information 
13. Patient Security and Privacy Considerations Regarding E-Mail Systems 
14. PHI Created for Research that Includes Treatment 
15. Physical Access to PHI 
16. Use and Disclosure of Protected Health Information for Fundraising Purposes 
17. Use and Disclosure of Protected Health Information for Marketing Purposes 
18. Use or Disclosure of Protected Health Information for Research Without Individual Authorization 
19. Use or Disclosure of Protected Health Information for the Purpose of Treatment, Payment or Health Care Operations 
20. Use or Disclosure of Protected Health Information Unrelated to Treatment, Payment, or Health Care Operations 

Powerpoint

1. Discounts & Perks 
2. Introduction to HIPAA for Physicians 
3. HHS Guidance for Privacy Under HIPAA 
4. HIPAA Administrative Simplification, Privacy & Security 
5. HIPAA Compliance Officer Education 
6. HIPAA Educational Primer 
7. HIPAA Introduction to OB Docs 
8. HIPAA Leadership 
9. HIPAA Minimum Necessary Standard
10. HIPAA Overview 
11. HIPAA Presentation: "What it is and How it Affects Us" 
12. HIPAA Privacy 
13. HIPAA Privacy and the Academic Medical Center 
14. HIPAA Privacy Presentation on Final Regulations 
15. HIPAA Privacy & Security Standards 
16. HIPAA Security Overview 
17. Multi-Institutional and Hybrid Entity Issues 
18. Privacy of Health Information for Deceased Individuals

Websites

1. Ivan’s Insights 

Websites of Interest