CONFIDENTIALITY PLAN MC SIGNED OFF.PDF

those proprietary MIHS, the Privacy If federal comply obtain MIHS, 4. to It is 3. health All The 2. the This Rules. partners If Grant The 1.
matters MC, greatest accomplish awarded, or with or MC, Confidential partners/business MINS. purposes anticipated Collection care of these • • • • partners/business activities Purposes information RE-LINK plan Agreement recognizes in awarded, Confidentiality from subdivision Maricopa Introduction
are Information and extent Rule. the MIHS, Arizona the use. and Information the of and or for will describes (BM) Accordingly, MC MIHS the of the
beyond KI-IC that Aggregate intended MC, MIFIS, KHC Grant that operations° activities Grant, purposes Which be Grant and administering will Plan Department State County
the and also is and statutes provisions as a will Treatment associates. may will most Flow and Monitoring requirements; Compliance Auditing Calculating associates referred That how specifying this KHC (Plan) of
scope certain will protect feasible purpose, KHC or of I-IIPAA maintain of be be of the of and/or purposes of including and the in for Individual to identifies MIHS, the Plan as the the contract as of Arizona, Special CONFIDENTIALITY
of this personal the information, in will the collected conducted Individual "health local and with the the which as MC, will local Grant with required Health Heath
Plan. without regulations. HIPAA covered the Individual collection fall program reviewing amount course MIHS, Individual individual and obligations include In the by and as the Care
information confidentiality summary compliance obtain, directly by MC of Information oversight'. within allowability local of of MG, Information KFIC a Maricopa the Human PLAN
about rendering use Privacy entity, confidentiality Information by and the partners/business integrity Grant or will of the partners/business Greater County Funding potential District FOR
and the encounter with the and and MC of MFRS 1<1-IC individual HIPAA and of their funds administering KHC May information'.' patients/clients protect parties Memorandum Phoenix Services Grantee d.b,a,
individual security retain Security and all partners/business to may Be of (MC) RE-ENTRY
of information data "minimum the KHC, individual staff, as staff, information Privacy associates Surveillance expenditures be the collect Collected of the arising associates Area. and Opportunity (NHS) under Maricopa
owners, other and least Rules as when with 4 paid to Grant the out Understanding as The Keogh Office the
officers types of necessary" amount and its local the from Rule's fiscal and of associates' can individual local confidentiality of defined Plan of Integrated COMMUNITY
or meaningless de-identified of with information MIHS local integrity Util Grant sub-awardees; be the Health Announcement Re-Entry
personnel information any partners itself information definitions ization compliance partners/business and business (MOU) in the between Minority Health
of as or data principle individual other and related audits then of and funds; summarized information security and/or MIHS, Connection Health, Community LINKAGES
may be useless. will to the partners/business 'treatment, quality Review with as of associate HIPAA System
participating be embodied information applicable business the flowing the from associates. Business Privacy MC, (1(1-IC) submits Linkages (MINS), GRANT
appropriate, When collected in Grant records from assurance Systems follows: focal information and to
clinics; NHS, the that provisions associates, which of MC associates payment requirements Such relationship. Associate and KHC act as this a
however, such as MC, and 111PAA will they local and for and programs. (SURS) related Security its (RE-LINK) political
or used of will KHC of to local
to the

of Health Grant HIPAA request by will II-1S when to efforts reasonable including and Which MU-IS job-related stored PDAs applicable for
little as necessary. or potential of the the authorize a such made and M containing or of basis, workforce Grants complete other Records: a servers, information devices), confidential
record as directty such Department of and that be response Records: systems reasonable rooms, all and methods timely foster RELINK Worker, must from all and have encrypted all all potential
or workplace either only conduct regulations, request wilt for storage take documents storage basis, authorized a will with Terminals Electronic not do similar with of the of
copy The S. U. the arid to ikelihood KI-IC MIHS 85008 Paper or on MillS Health employees of 85008) who on confidential other consistent clean
will their Grant, Grant. the with rules right or to AZ from rooms will staff and containers, regular other performed associated and AZ from secured all and wiped awareness
they to back RE-LINK the and connected the significant MC, request files a on or is requirements. information. Community Mil-IS Records Phoenix, Information individuals are that tapes, and
site, of CMS HIPAA have no MIHS, the Phoenix, Information locked MIHS ensure desk-site of staff All tiles ensure CDs, documented completely workforce
clinic information the to conduct to directly by would be to than refer St., of in available, will disposed shredding information confidential MIHS Navigator, staff. Electronic St., of by These will disks, be
a to 1(11Q related the disclosures be allowed seem other will MINS Roosevelt Disclosure information MIHS in ensure retention of Records: clinical Roosevelt Disclosure accessed MIHS basis, must foster
visit a that of and with be would that patient/client would entities it by not is destruction labeled, will confidential record Patient other Storing E. be information. drives, timely will
in aslittle MC, information connected would beyond a there to disclosure, Information E. 2601 Improper confidential storage information. or MIHS disclosure Paper in Servers (2601 Improper cannot computers. hard a devices MINS
information take MINS, time purpose Although Information such or disposal appropriately access, containing applicable Coordinator, and/or or hospital or confidential (including on such all device.
will by individual directly this the information disclosure, for Records: Accidental containing lockable confidential all inadvertent Information physicians programmatic protected destroyed and the of
individual they are at cases, obtained. a individual request Individual Paper where awaiting are bins minimize documents with for to Program Computers Main Accidental particular laptops is
and Information disclose that anticipated those individual be such a of of Prevent of to consistent potential Access and of Accessed: Prevent other password devices requirements disposal
examine necessary, not purposes of all of must make of receive Handling Location to documents workplaces safeguarding information waste/shred taken and the With Manager, Accountant, training. Location Be to and accessing computers, to prior
to Individual will be in oversight. to disclosures KHC and In are files and of Grants HIPAA Can records through similar retention
need as KHC for might Services disclosure authorization KHC and and Physical Safeguards files the confidential of documented Personnel Records Physical Safeguards for personal other information
of and except that involve or made. ell MC Use Records store available. ensure centralized measures disposal awareness Senior Research annual Records locations, Medical reason accessed on and record
personnel information Disclosure MC, Human would other MC, be event, If Storage, 1, 2 3. Electronic 1. 2.
KHC that MIHS, indirectly, disclosures and and any For compliant MIHS, would any In MIHS. disposition. 6. Paper A. B.
5.

A. S. a A, 7.
1. Paper Records Storage, Use justice Terminal 3, health protected and paper the use security name automated network systems only Federal 2. 85003) Records 1. Electronic background justice Terminal 3. providers seek protection Employees equipment, 2. Phoenix, 1. Paper Records Storage. Use clinical Manager, have 5_ other inadvertent
Physical and background record Personnel there are records, of and with are handled information. and Safeguards Can Physical Records record Personnel consent Safeguards AZ Physical and staff completed Personnel similar
Location Handling check Operator With information health wrftten are encryption officials password systems a DPS networked by Records state to Be Location check Operator With during from and are records, to 85003) Location Handling Program With devices_ disclosure
of of and is information Certification Access in order information. policies kept in and implement are containing approved authorized and laws and Prevent Accessed: of and is information Certification Access the course probationers dissemination trained on and Prevent of of Coordinator, EPIC Access of
Paper Individual subject and to to secured firewalls. and required through computer Accidental Computers subject and to of of manuals, Accidental Paper Individual training to confidential
Records: to are Training Information coordinate Probation regarding maintain to confidential firewall, an persons. regulations or Maricopa or to are Training Information probation for such confidentiality as or Records: Patient and Information
3620 Information periodic re-certified that in with officers the locations. Electronic access Adult Arizona Computer systems restrict Improper County Servers periodic re-certified that in release of information, of well as Improper Marioopa Information Navigator, granted in information
N. criminal every pertains Electronic care seek protection Employees procedures electronic adult Probation Department containing access Adult Storing criminal every pertains Paper supervision. protected case confidential by access by Electronic
4th by KHC two to providers consent and equipment, and probation of workstations to Disclosure Probation two to Records: including information Disclosure County MC Community MINS contained
Ave., background years. access, Records: are tools records. and employees Public these and of Electronic background years. access, Adult health and paper of Adult IT Records:
Suite Each handling, Adult during the from dissemination trained on records, and to secure Court court Safety with access items dissemination Information (620W Records checks. Each handling, information protected there records, Information Probation Health security. MI145 within
2-2, checks. employee and Probation course probationers of manuals, Technology case receive (DPS) to are kept of Jackson and employee and Probation in health are are (620 Worker, Staff staff personal
Phoenix, of for such confidentiality as protected information, initial criminal in criminal from St # of employees, order written kept in from W and includes associated computers,
AZ passed an dissemination employees, probation release information, of well Services and approved justice secured Electronic 3098, Terminals passed an dissemination to information. policies secured Paper Jackson physicians with
85013 initial of who of case as information, and An ongoing encrypted locations justice Phoenix, from initial of who coordinate Probation Records: St # Senior laptops.
criminal criminal receive supervision. protected including information confidential including systems individual training records and record Records: AZ Which criminal criminal receive with regarding locations. 3098, eaidior Grants REUNK PDAs
user on are care officers the Electronic other who and

KHC front and only paper as assistance granted data from All outside KHC frequently (BAA)
The the access on-site Any soon Which regular unauthorized and email. all the Compliance
to Director's other Suite. as application from Records: a on access Electronic to an to blocks via less Agreement
Records: keys after-hours provides or Office of revised with against data data no HIPAA
Paper have Executive PI-11 disposed for Terminals Electronic IL) of attachment firewall g (but Associate
MI grants building KHC of and maintained server, guard transmission accessin intervals annual Administrator
from the to the containing the securely responsible and 85013 from distinct KHC's to encrypted KFIC of Business MA
Information Management doors building and leave and staff Records AZ Infoffriation be and on transmission secure The persons regular completion Agreement. Hawkins. 11C1
The The printouts to shall stored, of and prohibited. All at and/or County
of system. doors. yed. authorized, or allowed shredded KHC Electronic Phoenix, of User electronically in means drive Records: Users (MOU) M. Madcopa
Disclosure ke reports or be Records; 2-2, Disclosure Data transmitted, encryption flash is Data successful Confidentiality Jennifer
buzzer office separately specially paper unattended, must Storing Sub stored permitted encrypted network Electronic after a Understanding
Improper and certain are been shall needed Paper in Ave., Improper Authorized securely be 256-bit only KHC in Authorized of
or lock and offices have tin* unsecured, Servers or 4th or each be must utilize The (FTP), the of as management completion of //cLike
door Suite that no longer Information N. of must Data server. Information verified Grantees
Accidental a by Office Manager cards At left no Computers 3620 Accidental 1(1-IC L) should data, Protocol outside KHC KliC annual Memorandum 4 Date Date
secured the week. be are to passwords to personnel: of server the to and and for Medicine
Prevent to per that Access of Accessed: Prevent minimum Transfer to Access approved qualified a of
to be door Financial identification days information printouts With Location Be to server provided a modification File the to connect With by Training Confidentiality include FACP
shall internal and seven Records Can and PHI authorized at via: access to be must annually) will MD, Department
Safeguards suite personal confidential or Personnel Physical Safeguards All to submissions or are Personnel Privacy and Plan of Director
2. office door, Business by security reports possible. 3. 1. Records 2. Network basis. only access KHC remote attempts 3. server than and %singer, Chairman Johnson Executive
Electronic Security awarded, Signature David Signature
B. 9- If Dr. MIHS Saundra KEIC