2016-698 Emergency Svc - North State Medical Transport - Application for Services Franchise by Ordinance

Browse Search

Policy 24: Policy on Staff Member Access to e-PHI North State Medical Transport Policy on Staff Member Access to e-PHI Purpose Under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") North State Medical Transport is required to ensure that all staff members have appropriate access to e-PHI, and that his or her identity is properly verified before access to North State Medical Transport's networks, systems and applications containing e-PHI can be obtained. This policy establishes procedures to prevent staff members (including former staff members)who should not have access to e-PHI from obtaining it, and ensures that those who are authorized to have access to e-PHI obtain access in a secure fashion. Scope This policy applies to all North State Medical Transport staff members who have access to any e-PHI that is created, received, maintained or transmitted by North State Medical Transport. The HIPAA Compliance Officer shall be responsible for ensuring proper administration of this policy. Procedure Authority to Access e-PHI 1. Staff members seeking access to any network, system, or application that contains e-PHI must satisfy a user authentication mechanism such as unique user identification and password, biometric input, or a user identification smart card to verify their identity and authority to access e-PHI. Z. Staff members seeking access to any network, system, or application must not misrepresent themselves by using another person's User ID and password, or other authentication information. 3. Staff members should take reasonable steps to ensure that they verify the identity and correct address (digital or physical) of the receiving person or entity prior to transmitting e-PHI. This might include sending a "test email" or calling a party before a fax is sent. Unique User Identification