Orange County NC Website
Browse       Search
4. If a law enforcement official states to North State Medical Transport that a notification, <br /> notice, or posting would impede a criminal investigation or cause damage to national <br /> security, North State Medical Transport shall: <br /> a. Delay notification for the time period specified by the official if the statement is in <br /> writing and specifies the time for which a delay is required; or <br /> b. If the notice is a verbal statement, delay notification temporarily, and no longer than <br /> 30 days from the date of the oral statement, unless a written statement is submitted <br /> during that time. If the statement is made orally, the HIPAA Compliance Officer shall <br /> document the statement, including the identity of the official making the statement. <br /> 5. North State Medical Transport shall provide written notification, in plain language, by <br /> first-class mail to each affected individual at the last known address of each individual. <br /> If the affected individual agreed to receive electronic notice of breaches, North State <br /> Medical Transport may provide notice by electronic mail. The notification may be <br /> provided in one or more mailings as information becomes available. <br /> 6. The HIPAA Compliance Officer shall utilize North State Medical Transport's "Individual <br /> Notice of Breach of Unsecured PHI" when sending notice to affected parties. The Notice <br /> shall include, to the extent possible: <br /> a. A brief description of what happened, including the date of the breach and the date <br /> of the discovery of the breach, if known; <br /> b. A description of the types of unsecured PHI that were involved in the breach (such <br /> as whether full name, social security number, date of birth, home address, account <br /> number, diagnosis, or other types of information were involved); <br /> c. Any steps individuals should take to protect themselves from potential harm <br /> resulting from the breach; <br /> d. A brief description of what North State Medical Transport is doing to investigate the <br /> breach, to mitigate harm to individuals, and to protect against any further breaches; <br /> and <br /> e. Contact procedures for individuals to ask questions or learn additional information <br /> about the incident from North State Medical Transport. These contract procedures <br /> shall include a toll-free telephone number and an e-mail address to reach North <br /> State Medical Transport's HIPAA Compliance Officer. <br /> 7. If the HIPAA Compliance Officer determines that affected individuals need to be <br /> contacted immediately to protect them from potential harm, the HIPAA Compliance <br /> Officer shall contact those individuals by telephone or other means as soon as possible. <br />