Agenda - Council - 08/22/2006 - Laserfiche WebLink

Home

CONSIDER ADOPTION OF HIPAA SECURITY POLICY By: Givonna Reed Kone, Human Resources Manager Background The administrative simplification standards required under the Health Insurance Portability and Accountability Act (HIPAA) include two components: privacy rules and security rules. The City of Ramsey has already adopted a HIPAA privacy policy. The HIPAA security rules focus on electronic protected health information. For this purpose, computer hard drives, voice response and fax -back systems, and email systems are all considered "electronic" data. The intent of the HIPAA security rules is to ensure the confidentiality of protected health information (PHI). Protected health information includes any medical information in any form that: • is created or received by a covered entity; and • relates to an individual's physical or mental condition, the provision of health care services to an individual, or the payment for health care services; or • identifies an individual or creates a reasonable basis to believe that certain information could be used to identify an individual. Attached is a list of the requirements outlined for drafting a HIPAA security policy. The Human Resources Manager and Information Technology Manager worked together to draft a policy; however, we thought it was in the City's best interest to NOT include the actual policy with this staff report. It is our feeling that we should not make public the measures the City takes to protect its electronic data. If any member of the City Council would like to review the actual memorandum that describes the measures taken by the City to protect its electronic data, please do not hesitate to contact me. Please note that in the interest of conserving paper, hardcopies of the HIPAA Security Policy requirements are only being distributed to the City Council and City Administrator. Staff members and residents who would like to review the HIPAA Security Policy requirements may contact the Human Resources Manager. Staff Recommendation Approve the attached resolution which indicates that the City does have a HIPAA Security Policy on file and recommend that the resolution be adopted by the City Council. Committee Action Based on Discussion G:\ Administration\ HumanResources \Benefits\HIPAA \Consider Adoption of HIPAA Security Policy 8- 22- 06.doc CC: 8 -22 -06 PC# 1 -223-