Privacy Official: The Privacy Official will serve as the contact person for participants who have questions, concerns, or complaints about the privacy of their PHI.
3.0720.02 REGULATION
Issue Date: 11/14/19 Duchesne County School District (the District) self-administers a group health plan (the Plan). Members of the District’s workforce have access to individually identifiable health information of Plan participants (1) on behalf of the Plan itself; or (2) on behalf of the District, for administrative functions of the Plan. Members of the District’s workforce who have access to PHI must comply with this privacy policy. No third party rights, including, but not limited to, rights of Plan participants, beneficiaries, covered dependents or business associates, are intended to be covered by this policy. The District reserves the right to amend or change this policy at any time (and even retroactively) without notice.
3.0720.03 PLAN’S RESPONSIBILITIES AS COVERED ENTITY Issue Date: 11/14/19 Privacy Official and Contact Person
The director of Insurance Services shall be the Privacy Official for the Plan. Workforce Training
Employees with access to PHI will receive training on privacy policies and procedures. A training schedule will be developed so that all employees with access to PHI receive the training necessary and appropriate to permit them to carry out their functions within the Plan. Technical and Physical Safeguards and Firewall Technical and physical safeguards to prevent PHI from intentionally or unintentionally being used or disclosed in violation of HIPAA’s requirements will be implemented. Technical safeguards include limiting access to information by creating computer firewalls. Physical safeguards include locking doors or filing cabinets. Privacy Notice A privacy notice will be sent to Plan participants informing them that the District has access to PHI in connection with its plan administrative functions. The privacy notice will also inform them of the District’s complaint procedures, the name and telephone number of the contact person, and the date of the notice. The notice of privacy practices will be individually delivered to all participants no later than April 14, 2017, on an ongoing basis at the time of an individual’s enrollment in the Plan or, in the case of providers, at the time of treatment and consent within sixty (60) days after a material change to the notice; and notice of availability of the privacy notice at least once every three years. Complaints The director of Insurance Services will be the Plan’s contact person for receiving complaints. The Privacy Official is responsible for creating a process for individuals to lodge complaints about the Plan’s privacy procedures and for creating a system for handling such complaints. A copy of the complaint procedure shall be provided to any participant upon request.
Made with FlippingBook flipbook maker