Policy & Procedure Manual (BHSD #4201)​  Click here to open the policy in pdf format

​Policy

Behavioral Health Services Department (BHSD) policy to ensure BHSD and its subcontractor have adequate method to secure and protect ePHI and PHI in accordance with applicable laws and regulations. Access to ePHI/PHI is based on a staff person’s role.

BHSD will adhere to the Security of ePHI/PHI as described in 42 CFR Part 2, 45 CFR Parts 160 and 164, HIPAA, HITECH Act, SCVHHS PP 585.23, and will require its subcontractors to adhere to above laws, regulations and county policy. Subcontractors are required to create and maintain and provide applicable Policies and Procedures in accordance with all applicable Privacy and Security Rules, including the transmission of ePHI/PHI and password protections.

Attachments in PDF

• Security Addendum- Attachment A