Laserfiche WebLink
Standard <br />The Health Plan shall implement policies and procedures designed to provide access to those with a <br />recognized need for access to ePHI and preclude access to those without such a recognized need. <br />Interpretation and Implementation Specifications <br />Authorization and /or <br />Supervision <br />(addressable) <br />Workforce Clearance <br />Procedures <br />(addressable) <br />Termination Procedures <br />(addressable) <br />References: <br />45 C.F.R. § 164.308(a)(3)(i). <br />Interpretation and Implementation Specifications <br />Access Establishment and <br />Modification <br />(addressable) <br />References: <br />45 C.F.R. § 164.308(a)(4(i)). <br />City of Ramsey HIPAA Security Policy <br />Workforce Security <br />[Administrative Safeguard] <br />1. The Health Plan shall implement procedures to <br />determine when and under what circumstances the <br />access of a workforce member to ePHI is appropriate. <br />2. The Health Plan shall implement procedures to <br />determine when and under what circumstances the <br />access of a workforce member to ePHI is appropriate. <br />3. The Health Plan shall implement procedures for <br />terminating access to ePHI when the employment of a <br />workforce member ends or as required by <br />determinations made as specified in paragraph <br />(a)(3)(ii)(B) [the Workforce Clearance Procedure] of <br />this section. <br />Information Access Management <br />[Administrative Safeguard] <br />Standard <br />The Health Plan shall implement policies and procedures for authorizing access to ePHI. <br />Access Authorization 1. The Health Plan shall implement policies and procedures <br />(addressable) for granting access to ePHI, for example, through access <br />to a workstation, transaction, program, process, or other <br />mechanism. <br />2. The Health Plan shall implement policies and procedures <br />that, based upon the covered entity's access <br />authorization policies, establish, document, review, and <br />modify a user's right of access to -a workstation, <br />transaction, program, process, or other mechanism. <br />-8- <br />