HIPAA Privacy Manual

Arizona Department of Health Services
Division of Behavioral Health Services

HIPAA Privacy Manual

Version 1.0
April 14, 2003

Arizona Department of Health Services
Division of Behavioral Health Services
HIPAA Privacy Manual

Table of Contents
Page No

SECTION 001:

HIPAA Privacy Requirements...............................................5

SECTION 002:

Administrative and General Requirements for the
Implementation of HIPAA .....................................................6

SECTION 003:

Minimum Necessary Standard .............................................9

SECTION 004:

Enrolled Persons ' Rights Related to Protected
Health Information...............................................................12
Department of Health and Human
Services, participating in a HIPAA related investigation, compliance review, proceeding or hearing, or engaging in reasonable opposition to any act or practice that the person in good faith believes to be unlawful under HIPAA regulations as long as the action does not involve disclosure of Protected Health Information in violation of the regulations.
Prohibition on Waiver of Rights: Neither ADHS/DBHS nor any workforce member shall require enrolled persons to waive any of their rights under HIPAA as a condition of treatment, payment, operations, enrollment in the health plan or eligibility for Non Title XIX benefits.
Documentation Requirements: ADHS/DBHS maintains the HIPAA Privacy Manual in written or electronic form, and maintains written or electronic copies of all communications, actions, activities or designations as are required to be documented herein, or otherwise under the HIPAA regulations, for a period of six (6) years from the later of the date of creation or the last effective date or such longer period that may be required under state or other federal law.
Privacy Security Requirements: When sending or receiving Protected Health Information,
18 Avenue
Phoenix Arizona 85007
Phone: [phone]

2. Right To Request Restrictions On Uses or Disclosures Of Protected Health Information, And
To Request Confidential Communications:
The ADHS/DBHS HIPAA Analyst is designated as the person or position title responsible for receiving requests to restrict the use or disclosure of enrolled person’s Protected Health Information and requests for confidential communications of protected health related information.
Requests for Restrictions on Uses or Disclosures: ADHS/DBHS permits an enrolled person to request that ADHS/DBHS restrict uses and disclosures of Protected Health Information made for treatment, payment or operations or disclosures to family or others involved in the enrolled person 's care, though ADHS/DBHS does not have to agree to the restriction requested.
If ADHS/DBHS agrees to the requested restriction(s), ADHS/DBHS must document the agreed upon restriction in writing, and abide by the restriction unless the enrolled person is in need of emergency treatment, the information is needed for the treatment, and the disclosure is to another
ADHS/DBHS
HIPAA Privacy Manual
Version 1.0
April 14, 2003

13

Arizona Department of Health