HIPAA & the 大象传媒
The 大象传媒 Health Privacy Office Provides HIPAA Privacy Compliance Support for all 大象传媒 SOM Workforce Members Performing Clinical Activities
The 大象传媒 Health Privacy Office provides privacy compliance support for all clinical activities performed by 大象传媒 SOM workforce members including the following:
- Providing required annual online HIPAA training for 大象传媒 SOM聽workforce members聽involved with clinical activities;
- Auditing and monitoring of current operations and processes created by or performed by 大象传媒 SOM workforce members to evaluate whether appropriate privacy and security controls are in place (i.e., access audits of the electronic health record to determine whether access to PHI of any patient was for legitimate business purposes);
- Conducting investigations of suspected privacy breaches involving PHI used for clinical purposes (as opposed to PHI used for education or research purposes); and
- Providing outreach and consultations for the 大象传媒 SOM workforce on actions and strategies that 大象传媒 SOM workforce members can take to ensure compliance with 大象传媒 Health HIPAA policies (i.e., consultations to ensure that PHI in the possession of 大象传媒 SOM workforce members is stored and transmitted securely, or that access to PHI is appropriately provisioned to only personnel in the SOM department, etc.).
大象传媒 Health HIPAA Policies Apply to all 大象传媒 SOM Workforce Members Involved in Clinical Care
The application of the 大象传媒 Health HIPAA Policies to the University of North Carolina at Chapel Hill School of Medicine clinical components extends by agreement with the 大象传媒 SOM to all employed personnel of the 大象传媒 SOM involved in clinical care including but not limited to full and part-time and paid and unpaid faculty, staff, students, trainees, interns and volunteers (大象传媒 SOM Workforce).
All 大象传媒 SOM Workforce members must comply with the 大象传媒 Health HIPAA policies at all times when performing or supporting any clinical activities for or on behalf of 大象传媒 Health.
When is a 大象传媒 SOM Workforce Member Considered to be Performing or Supporting Clinical Activities on Behalf of 大象传媒 Health?
The application of 大象传媒 Health HIPAA policies applies very broadly to any activity being performed by a member of the 大象传媒 SOM workforce that involves patient medical information that is related to clinical treatment.
Whenever an 大象传媒 SOM workforce member accesses, views, uses, sends, or disposes of patient data, the employee is considered to be performing clinical activities.
Annual HIPAA Training Required for all 大象传媒 SOM聽Workforce Members聽Involved in Clinical
All 大象传媒 SOM workforce members who provide or support clinical services in anyway must complete the 大象传媒 Health online HIPAA training annually as well as sign the 大象传媒 Health Confidentiality Statement.
Contacting the 大象传媒 Health Privacy Office
大象传媒 SOM workforce members are encouraged to contact the 大象传媒 Health Privacy Office for any HIPAA privacy compliance questions relating to clinical activities at:
大象传媒 Health Privacy Office
211 Friday Center Drive, Suite G063
Chapel Hill NC, 27514
984.974.1069
For questions about HIPAA and research or HIPAA and medical education teaching activities at 大象传媒 SOM/大象传媒 Medical Center, please contact the University of North Carolina Privacy Office聽at 919.962.6332 or by email at privacy@unc.edu.