2016-698 Emergency Svc - North State Medical Transport - Application for Services Franchise by Ordinance

Browse Search

Policy 1: Policy on HIPAA Risk Analysis North State Medical Transport Policy on HIPAA Risk Analysis Purpose North State Medical Transport is responsible, under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"),to ensure the privacy and security of all protected health information ("PHI") that we use or disclose. The foundation of compliance with the HIPAA is the completion of a "Risk Analysis"to identify existing risks and vulnerabilities in the way we create, receive, maintain or transmit our PHI. This policy describes our general approach to our HIPAA Risk Analysis. Scope North State Medical Transport's HIPAA Risk Analysis includes an assessment of potential risks and vulnerabilities to the confidentiality, availability and integrity of all PHI that North State Medical Transport creates, receives, maintains or transmits. This includes assessing any risks and vulnerabilities to the confidentiality, integrity and availability of non-electronic PHI (such as papers and documents) and electronic protected health information (e-PHI). At a minimum, the risk analysis will include a review of North State Medical Transport's: + General security hardware and procedures to protect our facility, vehicles, and electronic assets; + Computer servers (on or off-site) that store PHI; ❖ Computer network (including any local and wide area networks, communications servers and bandwidth connections, and storage devices and hardware); •• Databases where patient information is created, stored, and accessed by North State Medical Transport, whether on or off-site; • Electronic media that store e-PHI such as hard drives, disks, CDs, DVDs, USB drives or other storage devices,transmission media, or portable electronic media; + Electronic devices used for processing patient information (such as laptops and field data collection devices); + Workstations and access points where PHI is created, accessed and used;