Common use of Minimum Content of the Policies and Procedures Clause in Contracts

Minimum Content of the Policies and Procedures. The Policies and Procedures shall include measures to address the following Privacy and Security Rule Provisions: 1. Uses and Disclosures of PHI - 45 CFR § 164.502(a) 2. Minimum Necessary - 45 CFR § 164.502(b) 3. Disclosures to Business Associates- 45 C.F.R. § 164.502(e)(1) 4. Training – 45 C.F.R. § 530(b)(1) 5. Safeguards - 45 C.F.R. § 164.530(c)(1) 6. Changes to Policies and Procedures - 45 C.F.R. § 164.530(i)(2) Security Rule Provisions 7. Administrative Safeguards, including all required and addressable implementation specifications – 45 C.F.R. § 164.308(a) and (b) 8. Device and Media Controls – 45 C.F.R. § 164.310(d)(1) 9. Encryption and Decryption – 45 C.F.R. § 164.312(a)(2)(iv) & 164.312(e)(2)(ii) 10. Audit Controls – 45 C.F.R. § 164.312(b)

Minimum Content of the Policies and Procedures. The Policies and Procedures shall include measures to address the following Privacy and Security Rule Provisionsprovisions: 1. Uses and Disclosures of PHI - PHI- 45 CFR C.F.R. § 164.502(a) 2. Minimum Necessary - 45 CFR § 164.502(b) 3. Disclosures to Business Associates- Security Management Process- 45 C.F.R. § 164.502(e)(1164.308(a)(1)(i) 3. Information Access Management- 45 C.F.R. § 164.308(a)(4) 4. Training – Workstation Security- 45 C.F.R. § 530(b)(1164.310(c) 5. Safeguards - 45 C.F.R. § 164.530(c)(1) 6. Changes to Policies and Procedures - 45 C.F.R. § 164.530(i)(2) Security Rule Provisions 7. Administrative Safeguards, including all required and addressable implementation specifications – 45 C.F.R. § 164.308(a) and (b) 8. Device and Media Controls – Controls- 45 C.F.R. § 164.310(d)(1164.310(d) 96. Encryption and Decryption – Decryption- 45 C.F.R. §§ 164.312(a)(2)(iv) & and 164.312(e)(2)(ii) 10. Audit Controls – 45 C.F.R. § 164.312(b)