Agenda - 09-17-2002 - 8g - Laserfiche WebLink

Browse Search

5 INITIAL PROPOSED HIPAA COMPLIANCE SCHEDULE Action Dates Health department as beta tester for state assessment flow May 2002 instrument Health department designated Privacy and Security Officers for the June 2002 department to participate in statewide training Formation of"HIPPA Workgroup"—to conduct an initial study of August 2002 HIPAA as it applies to Orange County. Identifying the "Covered Entity" -- Orange County Board of County September 17, 2002 Commissioners decides whether the County will be treated as a Hybrid Entity. The "Covered Entity" files an Electronic Date Interchange Must be filed prior to Compliance Plan to request that the deadline for the County to October 16, 2002 comply with HIPAA's new standard medical and billing code sets be postponed to October 2003. Designating a "compliance officer(s)" and/or"privacy officer(s)" and appointment of a HIPAA Compliance Committee as may be required by the privacy rules. Baselining the Agency— Identify protected health care information maintained by County Departments and the flow of such information, within the agency, between agency, and outside associates Gap Analysis — Compare HIPAA privacy requirements with all Deadline, April 2003. existing health care information privacy laws; compare HIPAA privacy requirements with existing privacy-related policies, procedures, practices and forms. Identify new policies required and obsolete policies to assure complete compliance with HIPAA and any more stringent state laws. Develop a work plan and budget to achieve HIPAA compliance. Implementation — Conduct HIPAA awareness training for the effected County Departments as required; create new policies and forms identified through the Gap Analysis; implement new policies. Maintaining Compliance — Develop and implement ongoing training program for new and existing employees, an internal audit program Ongoing to ensure ongoing HIPAA compliance.