c. Comm Policy 39.00/HIPAA - Laserfiche WebLink

CASS COUNTY COMMISSION POLICY MANUAL 39.00 SUBJECT: HEALTH INSURANCE PORTABILITY & ACCESSIBILITY ACT (HIPAA) PAGE 9 OF 10 The contract or other written arrangement will authorize termination if the business associate violates its terms. If Cass County knows of a pattern of non-compliance with HIPAA by the business associates, Cass County realizes it will be found to be non-compliant unless Cass County took reasonable steps to cure the breach or end the violation, as applicable, and, if such steps were unsuccessful: *Terminate the contract or arrangement, if feasible; or *If termination is not feasible, report the problem to the Privacy Officer. Verification Policies: Before disclosing IIHI, Cass County will verify the identity of the person requesting the IIHI and the authority of that person to have access. Cass County may rely on written statements, if such reliance is reasonable. For public officials, Cass County may rely on an identification badge or a letter written on government letterhead. Cass County will treat a personal representative as the individual for purposes of the privacy regulations: *A personal representative is someone who has, under applicable law, the authority to act on behalf of an individual in making decisions related to health care. *Cass County will abide by special provisions for unemancipated minors, deceased individuals, and abuse-neglect and endangerment situations. Cass County will accommodate all reasonable requests from individuals to receive communication of protected IIHI by alternative means or at an alternative location, provided the individual clearly states that disclosure of all or part of that information could endanger the individual.