Orange County NC Website
Browse       Search
Policy 29: Policy on Third Party Access to e-PHI <br /> North State Medical Transport <br /> Policy on Third Party Access to e-PHI <br /> Purpose <br /> North State Medical Transport is required by the Health Insurance Portability and <br /> Accountability Act of 1996 ("HIPAA")to control access to our physical locations, such as <br /> stations, buildings, garages and offices, vehicles, and secured areas where our electronic <br /> protected health information ("e-PHI") is stored as well as system hardware, software, or other <br /> mobile electronic devices that are used to create, receive, maintain or transmit e-PHI. This <br /> policy outlines our approach to limiting third party access to our e-PHI while at the same time, <br /> permitting authorized access in the event that our contingency plan is operation. <br /> Scope <br /> This policy applies to all North State Medical Transport staff members who control third <br /> party access to our e-PHI and systems, hardware and mobile electronic devices used to create, <br /> receive, maintain or transmit e-PHI. It is intended to cover all physical locations that house our <br /> information system hardware, software and related devices and equipment that are utilized to <br /> create, receive, maintain or transmit e-PHI at North State Medical Transport. <br /> Procedure <br /> Access During Contingency Operations <br /> 1. The HIPAA Compliance Officer will work with individuals who manage electronic <br /> information systems to determine contingency plans and procedures that should be <br /> implemented in the event of the need to restore lost data and to maintain <br /> uninterrupted access to e-PHI. <br /> 2. The HIPAA Compliance Officer will identify outside parties who have permission to <br /> access our electronic systems and secured areas in the event that restoration and <br /> preservation of data is necessary. <br /> 3. TheH|PAACn[np|ianceOffnervVi|| vvorkvVithOmaneQe[nenttodove|opo "ua|| |ist" nf <br /> persons who need immediate notification when the contingency plan is in operation. <br /> Facility Security <br />