c. Comm Policy 39.00/HIPAA - Laserfiche WebLink

CASS COUNTY COMMISSION POLICY MANUAL 39.00 SUBJECT: HEALTH INSURANCE PORTABILITY & ACCESSIBILITY ACT (HIPAA) ADOPTED DATE: JANUARY 21, 2003 PAGE 1 OF 10 Policy Statement: The Cass County HIPAA policies contained herein shall apply to each and every affected Department in Cass County relevant to the storage and dissemination of Individuals Identifiable Health Information ("IIHI") (hereinafter "Privacy Regulation"). It is the policy of Cass County to provide for enhanced security and privacy of individual health information and standardize data interchanges between Cass County and health-care organizations, the State of North Dakota or other business associates. Appointment and Duties of Data Privacy Officer: The Cass County Coordinator, Auditor and Social Services Director shall serve as the Privacy Officers for Cass County (hereinafter "Privacy Officers"). The Privacy Officers shall carry out and implement the policies stated herein and otherwise required under applicable Federal, State, and local laws. The Privacy Officers shall receive requests or complaints and should provide information about matters covered by HIPAA. The Privacy Officers need to be familiar with privacy regulations. Delegation of some of these duties may be given by the Privacy Officer to those whom they may designate within their departments. The County Coordinator is the point person for implementation of these policies in Cass County, as a whole. Minimum Necessary Policies: Cass County will make reasonable efforts to limit the use and disclosure of IIHI. Release will be to accomplish the intended purpose of the use or disclosure. In general, release policies do not apply in the following circumstances: *Disclosures for treatment; *Use or disclosures made to the individual subject of the data; *Disclosures made to DHS, Office of Civil Rights; *Use or disclosure as required by law or court order; *Use or disclosure required for compliance with the privacy regulation.