Orange County NC Website
Browse       Search
1. The HIPAA Compliance Officer will work with management to determine what outside <br /> parties, in general, should have access to e-PHI and the electronic information system <br /> and determine the extent of that access. <br /> 2. The HIPAA Compliance Officer will maintain an inventory of all software, hardware and <br /> mobile electronic devices used to create, receive, maintain or transmit e-PHI at North <br /> State Medical Transport. That inventory should include: <br /> a. A unique identification number for hardware and other devices that are part of the <br /> electronic information system. <br /> b. A file to catalog all software, hardware and mobile electronic devices with their <br /> unique identification numbers. <br /> 3. Any discrepancies in the current inventory of software, hardware and mobile electronic <br /> devices will be reported to management and will be investigated to ensure that there is <br /> a proper accounting of all items and to determine whether further action may need to <br /> be taken in response to the loss of an item (e.g., breach notification in the event of a <br /> breach of unsecured PHI. <br /> 4. If North State Medical Transport implements keypad access to physical facilities,the <br /> HIPAA Compliance Officer will ensure that access codes are changed or disabled when <br /> staff members leave. <br /> 5. There will be measures at the entrance to North State Medical Transport's facility and at <br /> key access points that require personal identification, so that only authorized parties <br /> gain access to areas where e-PHI can be accessed. These procedures will be reviewed <br /> periodically to ensure only authorized persons with a legitimate purpose for access <br /> actually have access to the facility or secured area. <br /> Access Control and Validation <br /> 1. The HIPAA Compliance Officer will maintain a list of all third parties with approved <br /> access to e-PHI and the electronic information system. This list will include names of <br /> approved vendors and other outside parties who have permission to access our facilities <br /> and secure areas. <br /> 2. Software testing and other maintenance or service of the electronic information system <br /> will be carefully monitored by the HIPAA Compliance Officer to ensure that only <br /> necessary e-PHI is accessed and that e-PHI is not being improperly used or disclosed. <br /> 3. North State Medical Transport will ensure that only approved parties with a legitimate <br /> need to access our electronic information system are granted access. If outside parties <br />