Rule 5122-1-03. HIPAA requirements, policies and procedures

This is an Internal Management (IM) rule governing the day-to-day staff procedures and operations within an agency. January 24, 2011 111.15 (A) Purpose. The purpose of this rule shall be to establish required policies and procedures for department-wide compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the American Recovery and Reinvestment Act of 2009 (ARRA), and implementing regulations. (B) Procedure. All offices, hospitals, including CSN programs, and workforce members of the Ohio department of mental health (ODMH) are directed to follow all applicable mandates found in the "ODMH HIPAA Requirements, Policies, and Procedures Manual" maintained at each regional psychiatric hospital (RPH), at OSS, and in central office. Failure to comply with this internal management rule and its referenced document, the "ODMH HIPAA Requirements, Policies, and Procedures Manual", may result in disciplinary sanctions as defined in ODMH policy AH-22, "Code of Conduct and General Work Rules", effective January 1, 2010, and as it may be amended. Supplemental Information Authorized By: 5119.01 Amplifies: 5122.31 9/30/2002