Orange County NC Website
Browse       Search
Policy 26: Policy on Disaster Management and Recovery of a-PHI <br /> North State Medical Transport <br /> Policy on Disaster Management and Recovery of e-PHI <br /> Purpose <br /> North State Medical Transport is responsible under the Health Insurance Portability and <br /> Accountability Act of 1996 ("HIPAA") for ensuring that we have a process in place to ensure that <br /> we can recover from the catastrophic disruption of our information system and loss of any data <br /> or information, especially electronic protected health information (" e-PHI"), which may be <br /> stored on that system. This policy will be followed in an emergency situation such as or disaster <br /> such as fire,vandalism,terrorism, system failure, or natural disaster. <br /> Scope <br /> This policy applies to all North State Medical Transport staff members who create, <br /> receive or use PHI and e-PHI, and any other confidential patient or business information. It is <br /> intended to cover all information system hardware, software and operational procedures. The <br /> HIPAA Compliance Officer shall be the primary party in charge of disaster management and <br /> recovery. <br /> Procedure <br /> To ensure that North State Medical Transport will be able to recover from a serious <br /> information system disruption, including situations that could lead to the loss of data in the <br /> event of an emergency or disaster (such as fire, vandalism,terrorism,system failure, or natural <br /> disaster)the following procedures are established: <br /> 1. A disaster recovery plan will be established and implemented to restore or recover any <br /> loss of e-PHI and any loss or disruption to the systems required to make e-PHI available. <br /> 2. The disaster recovery plan will be developed by staff members responsible for the <br /> maintenance of the security and integrity of the information system and will be <br /> reviewed and approved by the HIPAA Compliance Officer and senior management. <br /> 3. The disaster recovery plan must include: <br /> a. A data backup plan including the storage location of backup media. <br /> b. Procedures to restore e-PHI from data backups in the case of an emergency or <br /> disaster that results in a loss of critical data. <br />