Transporting Protected Health Information - Revision history

Mhurlocker: /* Definitions: */

2023-08-16T14:28:53Z

Definitions:

@@ Line 39: / Line 39: @@
 == Definitions: ==
 ''Transport'' means to physically move PHI (whether on paper, or on mobile digital devices and electronic storage device such as a laptop computer, smartphone, USB/thumb drive or a disk) from one location to another, by any means including by foot, motor vehicle including courier, airplane or other means of transportation. For example: moving a medical record from one clinic to another, from one department to another, from an external research source back to the facility, or from the office to home.
-<br \><br \>
+<br \><br \>'''Protected Health Information (PHI)'''
-''Protected health information'' means information that relates to past, present or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present or future payment for health care to an individual, which identifies the individual or as to which there is a reasonable basis to believe could be used to identify the individual.
 == Procedures: ==
 # PHI that is being transported within a facility, such as from one department to another, will be attended or supervised at all times, or otherwise secured to avoid unauthorized access, loss and/or tampering.

Dpanowic at 22:17, February 18, 2020

2020-02-18T22:17:54Z

← Older revision		Revision as of 17:17, February 18, 2020
Line 32:		Line 32:
	Revised Date:<br />		Revised Date:<br />
	Reviewed Date: <br />		Reviewed Date: <br />
	~~<br />~~
	<big>'''Transporting Protected Health Information Policy'''</big>		<big>'''Transporting Protected Health Information Policy'''</big>
	== Policy: ==		== Policy: ==
Line 42:		Line 41:
	<br \><br \>		<br \><br \>
	''Protected health information'' means information that relates to past, present or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present or future payment for health care to an individual, which identifies the individual or as to which there is a reasonable basis to believe could be used to identify the individual.		''Protected health information'' means information that relates to past, present or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present or future payment for health care to an individual, which identifies the individual or as to which there is a reasonable basis to believe could be used to identify the individual.

	== Procedures: ==		== Procedures: ==
	# PHI that is being transported within a facility, such as from one department to another, will be attended or supervised at all times, or otherwise secured to avoid unauthorized access, loss and/or tampering.		# PHI that is being transported within a facility, such as from one department to another, will be attended or supervised at all times, or otherwise secured to avoid unauthorized access, loss and/or tampering.
Line 55:		Line 53:
	# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.		# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.
	# Contact the HIPAA Privacy Office for additional guidance.		# Contact the HIPAA Privacy Office for additional guidance.
	~~For additional information, please contact the~~ [mailto:~~debrbishop~~@~~nebraskamed~~.~~com~~ Privacy Officer] ~~or see~~ UNMC Policy #6051, [[Computer Use/Electronic Information \| Computer Use and Electronic Information Security Policy]]~~, or~~ UNMC's [http://www.unmc.edu/hipaa/ HIPAA] information pages.		==Additional Information==
			*Contact [mailto:dbishop@unmc.edu Privacy Officer]
			*See UNMC Policy #6051, [[Computer Use/Electronic Information \| Computer Use and Electronic Information Security Policy]]
			*See UNMC's [http://www.unmc.edu/hipaa/ HIPAA] information pages


	This page maintained by [mailto:dpanowic@unmc.edu dkp].		This page maintained by [mailto:dpanowic@unmc.edu dkp]

Afaylor: add Faculty tab

2019-08-02T18:02:47Z

add Faculty tab

← Older revision		Revision as of 13:02, August 2, 2019
Line 20:		Line 20:
	<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF"		<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF"
	width="20">[[Intellectual Property]]</td>		width="20">[[Intellectual Property]]</td>
			<td style="border-bottom:2px solid #A3B1BF" width="3"> </td>
			<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF"
			width="20">[[Faculty]]</td>
	</tr>		</tr>
	</table>		</table>

Afaylor at 19:02, September 19, 2016

2016-09-19T19:02:48Z

← Older revision		Revision as of 14:02, September 19, 2016
Line 23:		Line 23:
	</table>		</table>
	<br />		<br />
	[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Confidential Information]] \| [[Protected Health Information ~~(PHI)~~]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]]		[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Retention and Destruction/Disposal of Private and Confidential Information]] \| [[Use and Disclosure of Protected Health Information]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]] \| [[Honest Broker]] \| [[Social Security Number]] \| [[Third Party Registry]] \| [[Information Security Awareness and Training]]
	<br /><br />		<br /><br />
	Policy No.: '''6073'''<br />		Policy No.: '''6073'''<br />

Afaylor: /* Procedures: */

2016-09-19T18:11:39Z

Procedures:

← Older revision		Revision as of 13:11, September 19, 2016
Line 49:		Line 49:
	## If PHI is being accessed from or taken home to work during off-hours, employees' manager/director should be notified and approve such work at home off-hours.		## If PHI is being accessed from or taken home to work during off-hours, employees' manager/director should be notified and approve such work at home off-hours.
	## PHI in the home must be secured from access or view by family members and others. Workforce members shall log out of information systems immediately after use and shall secure their login and password so that others cannot use it.		## PHI in the home must be secured from access or view by family members and others. Workforce members shall log out of information systems immediately after use and shall secure their login and password so that others cannot use it.
	# Mobile devices must be password protected and encrypted. For additional information, refer to the [~~http~~://~~www~~.unmc.edu/its/~~security~~/procedures/enduser.html End User Device Procedure] for security of mobile devices such as laptops, USB/thumb drives, etc.		# Mobile devices must be password protected and encrypted. For additional information, refer to the [https://info.unmc.edu/its-security/policies/procedures/enduser.html End User Device Procedure] for security of mobile devices such as laptops, USB/thumb drives, etc.
	# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.		# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.
	# Contact the HIPAA Privacy Office for additional guidance.		# Contact the HIPAA Privacy Office for additional guidance.

Afaylor: /* Procedures: */

2016-07-28T16:53:48Z

Procedures:

← Older revision		Revision as of 11:53, July 28, 2016
Line 52:		Line 52:
	# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.		# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.
	# Contact the HIPAA Privacy Office for additional guidance.		# Contact the HIPAA Privacy Office for additional guidance.
	For additional information, please contact the [mailto:~~tscrogin~~@~~unmc~~.~~edu~~ Privacy Officer] or see UNMC Policy #6051, [[Computer Use/Electronic Information \| Computer Use and Electronic Information Security Policy]], or UNMC's [http://www.unmc.edu/hipaa/ HIPAA] information pages.		For additional information, please contact the [mailto:debrbishop@nebraskamed.com Privacy Officer] or see UNMC Policy #6051, [[Computer Use/Electronic Information \| Computer Use and Electronic Information Security Policy]], or UNMC's [http://www.unmc.edu/hipaa/ HIPAA] information pages.

	This page maintained by [mailto:dpanowic@unmc.edu dkp].		This page maintained by [mailto:dpanowic@unmc.edu dkp].

Afaylor: /* Procedures: */

2015-12-01T16:57:04Z

Procedures:

← Older revision		Revision as of 11:57, December 1, 2015
Line 52:		Line 52:
	# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.		# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.
	# Contact the HIPAA Privacy Office for additional guidance.		# Contact the HIPAA Privacy Office for additional guidance.
	For additional information, please contact the [mailto:~~swrobel~~@unmc.edu Privacy Officer] or see UNMC Policy #6051, [[Computer Use/Electronic Information \| Computer Use and Electronic Information Security Policy]], or UNMC's [http://www.unmc.edu/hipaa/ HIPAA] information pages.		For additional information, please contact the [mailto:tscrogin@unmc.edu Privacy Officer] or see UNMC Policy #6051, [[Computer Use/Electronic Information \| Computer Use and Electronic Information Security Policy]], or UNMC's [http://www.unmc.edu/hipaa/ HIPAA] information pages.

	This page maintained by [mailto:dpanowic@unmc.edu dkp].		This page maintained by [mailto:dpanowic@unmc.edu dkp].

Afaylor: /* Procedures: */

2015-04-28T21:13:38Z

Procedures:

← Older revision		Revision as of 16:13, April 28, 2015
Line 49:		Line 49:
	## If PHI is being accessed from or taken home to work during off-hours, employees' manager/director should be notified and approve such work at home off-hours.		## If PHI is being accessed from or taken home to work during off-hours, employees' manager/director should be notified and approve such work at home off-hours.
	## PHI in the home must be secured from access or view by family members and others. Workforce members shall log out of information systems immediately after use and shall secure their login and password so that others cannot use it.		## PHI in the home must be secured from access or view by family members and others. Workforce members shall log out of information systems immediately after use and shall secure their login and password so that others cannot use it.
	# Mobile devices must be password protected and encrypted. For additional information, refer to the [http://www.unmc.edu/its/~~docs~~/~~security_enduserdevice~~.~~pdf~~ End User Device Procedure] for security of mobile devices such as laptops, USB/thumb drives, etc.		# Mobile devices must be password protected and encrypted. For additional information, refer to the [http://www.unmc.edu/its/security/procedures/enduser.html End User Device Procedure] for security of mobile devices such as laptops, USB/thumb drives, etc.
	# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.		# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.
	# Contact the HIPAA Privacy Office for additional guidance.		# Contact the HIPAA Privacy Office for additional guidance.

Dpanowic at 19:29, December 28, 2012

2012-12-28T19:29:43Z

← Older revision		Revision as of 14:29, December 28, 2012
Line 25:		Line 25:
	[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Confidential Information]] \| [[Protected Health Information (PHI)]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]]		[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Confidential Information]] \| [[Protected Health Information (PHI)]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]]
	<br /><br />		<br /><br />
	Policy No.: '''~~6072~~'''<br />		Policy No.: '''6073'''<br />
	Effective Date: '''01/30/12'''<br />		Effective Date: '''01/30/12'''<br />
	Revised Date:<br />		Revised Date:<br />

Dpanowic at 20:25, December 18, 2012

2012-12-18T20:25:33Z

← Older revision		Revision as of 15:25, December 18, 2012
Line 25:		Line 25:
	[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Confidential Information]] \| [[Protected Health Information (PHI)]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]]		[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Confidential Information]] \| [[Protected Health Information (PHI)]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]]
	<br /><br />		<br /><br />
			Policy No.: '''6072'''<br />
			Effective Date: '''01/30/12'''<br />
			Revised Date:<br />
			Reviewed Date: <br />
			<br />
			<big>'''Transporting Protected Health Information Policy'''</big>
	== Policy: ==		== Policy: ==
	All Protected Health Information (PHI) in paper and electronic form must be transported and stored in a secure manner to safeguard it against improper disclosure and/or loss.		All Protected Health Information (PHI) in paper and electronic form must be transported and stored in a secure manner to safeguard it against improper disclosure and/or loss.
Line 46:		Line 52:
	# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.		# If PHI is lost, stolen or improperly accessed by others, immediately notify the ITS Help Desk, Privacy Officer or Information Security Officer. Immediately notify UNMC Security and file a police report if PHI is stolen.
	# Contact the HIPAA Privacy Office for additional guidance.		# Contact the HIPAA Privacy Office for additional guidance.
	For additional information, please contact the Privacy Officer or see UNMC Policy #6051, [[Computer Use/Electronic Information \| Computer Use and Electronic Information Security Policy]], or UNMC's [http://www.unmc.edu/hipaa/ HIPAA] information pages.		For additional information, please contact the [mailto:swrobel@unmc.edu Privacy Officer] or see UNMC Policy #6051, [[Computer Use/Electronic Information \| Computer Use and Electronic Information Security Policy]], or UNMC's [http://www.unmc.edu/hipaa/ HIPAA] information pages.

	This page maintained by [mailto:dpanowic@unmc.edu dkp].		This page maintained by [mailto:dpanowic@unmc.edu dkp].