North Carolina Public Health Law

These materials are for the HIPAA Critical Updates workshop that will be held on September 26, 2017 in Asheville, NC. Please download or print copies if you would like to have them with you during the workshop. Hard copies will not be provided. 

Participants are particularly encouraged to download or print PowerPoint presentations and documents marked "Handout." Documents listed under "Links to Additional Information" are provided for your reference but you will not need copies during the workshop.

Agenda

Agenda - 2017 HIPAA Critical Updates Workshop 

Hybrids and BAs and Workforce, Oh My! A Guide to Who and What is Covered

PowerPoint Presentation - Hybrids and BAs and Workforce, Oh My! (Moore)

Handout - Hybrids and BAs and Workforce, Oh My! (Moore)

Handout - Blog Post: Should a Local Government be a HIPAA Hybrid Entity? (Wall)

Links to Additional Information on Covered Entities and Business Associates:

• HHS Overview of Covered Entities and Business Associates
• CMS Covered Entity Decision Tool
• HHS Overview of Business Associates
• HHS Sample Business Associate Agreemeent Provisions
• HIPAA Privacy Rule Provision - Organizational Requirements for Hybrid Entities (45 CFR 164.105(a))

Releasing PHI to Individuals or the Third Parties They Designate

PowerPoint Presentation - Releasing PHI to Individuals or the Third Parties They Designate

Handout - NC DHHS Form 4056: Authorization to Disclose PHI (English and Spanish)

Links to Additional Information on Right of Access and Authorization:

• HHS Guidance on the Individual Right of Access
• HIPAA Privacy Rule Provision on Right of Access (45 CFR 164.524)
• HIPAA Privacy Rule Provisions on Authorization (45 CFR 164.508)

Update: Special Issues with Minors' PHI

Handout - Memo: HIE Opt-Out for Unemancipated Minors (Moore)

Handout - Consent to Health Care for Minor Children: Overivew of North Carolina Law (Moore)

Breach! Whom to Notify and How

PowerPoint Presentation - Breach Notification: Who, When, What, and How? (Moore)

Handout - HHS Document: Breach Portal Required Information

Links to Additional Information on Breach:

• HHS Guidance on the Breach Notification Rule
• Complete Text of the HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D)

Breach! Following Up with Employees Involved

PowerPoint Presentation - HIPAA Breaches, Sanctions, and Chapter 126 (Maynard)

Workshop sessions refer frequently to portions of the HIPAA regulations. It is assumed that all workshop participants have access to these regulations. A PDF version of the combined regulations can be downloaded through the U.S. Department of Health & Human Services' "HIPAA for Professionals" website.