Research: Laws, regulations, and internal policies

A. Laws and regulations to follow when managing patient information:

1. ARRA – American Recovery and Reinvestment Act
2. HIPAA – Health Insurance Portability and Accountability Act
3. Security of Health Data (GS 130A-374)
4. Confidentiality of Records (GS 130A-143)
5. Centers for Medicate and Medicaid, Meaningful use

B. Additionally, the following CMH Policies apply when managing patient information:

1. HIPAA Minimum Necessary Policy #HS-COM013
2. Confidentiality, Security and Integrity of Data/Information Policy #HS-IS003 
3. Safeguarding Protected Health Information Policy #HS-COM024
4. Data Integrity and Validation Policy #HS-IS019
5. Device and Media Control Policy #HS-IS020
6. Encryption and Decryption Policy #HS-IS037
7. Institutional Request for Patient Information Policy #HS-IS044