Institute:Office of National Coordinator (ONC) Workforce Training Curriculum
Component:The Culture of Health Care
Unit:Privacy, Confidentiality, and Security
Lecture:HIPAA Privacy Rule
Slide content:Other Aspects of Privacy Practices Must be written in plain language Practices/organizations must state they preserve the right to change NPP There must be a complaint process Practices/organizations must designate a privacy official in the office See Oregon Health & Science Universitys examples of NPP: http://www.ohsu.edu/xd/about/services/integrity/ips/npp.cfm 12
Slide notes:Some other aspects of privacy practices are that they must be written in plain language, although later slides will show that this is somewhat of an issue. Practices and organizations have to state that they reserve the right to change the NPP. There must be some sort of complaint process by which a patient can challenge whether the privacy practices have been inappropriate. Every practice organization must designate a privacy official, essentially a chief privacy officer. In smaller practices, this role may be filled by the office manager or perhaps one of the physicians in the practice. Listed on this slide is the link to the Oregon Health & Science Universitys NPP, which has been translated into numerous languages. There are many publicly available resources that provide NPP template forms and tools. 12