Laserfiche WebLink
• <br />Definition of Protected Health 5. Protected Health Information (PHI) means individually <br />Information (PHI) identifiable information relating to: <br />a. The past, present or future physical or mental <br />health or condition of an individual; <br />b. The provision of healthcare to an individual; <br />c. The past, present or future payment for health <br />care provided to an individual. <br />Definition of Electronic 6. Electronic Protected Health Information (ePHI) means PHI <br />Protected Health Information maintained or transmitted in electronic media, including, <br />(ePHI) but not limited to, electronic storage media (i.e., hard <br />drives, digital memory medium) and transmission media <br />used to exchange information in electronic storage media <br />(i.e., internet, extranet, and other networks). PHI <br />transmitted via facsimile and telephone is not considered <br />to be transmissions via electronic media. <br />Revisions to HIPAA Policies and 7 The Health Plan's HIPAA policies and procedures may be <br />Procedures revised at any time, in order to comply or enhance <br />compliance with HIPAA. <br />Policy Inquiries 8. Inquiries relative to HIPAA policies and procedures should <br />be directed to the HIPAA Privacy Officer or the HIPAA <br />Security Officer. <br />Specific Policies and Procedures 9. The Health Plan's specific policies and procedures have <br />been created in order to satisfy HIPAA's requirements. <br />Other Laws <br />Third Party Service Providers <br />Record Retention <br />10. In addition to HIPAA, covered entities may be subject to <br />other laws that address the privacy and /or security of <br />health information, including, but not limited to, the <br />Minnesota Data Practices Act. HIPAA establishes a floor — <br />the minimum requirements with which a covered entity <br />must comply. To the extent the requirements of any <br />other law provide more protection to the subject of the <br />health information, those requirements will apply. <br />11. Nothing precludes the Health Plan from contracting with a <br />third party service for assistance in complying with the <br />Health Plan's HIPAA policies and procedures. <br />12. A copy of all HIPAA covered information and any revisions <br />shall be maintained for a period of at least six (6) years. <br />Such retention may be in printed or electronic format, or <br />both. <br />City of Ramsey HIPAA Security Policy 3 <br />