ࡱ> _a^#` _Wbjbj BPNb b b b b b b v >I>I>I8vI"Jv "JpK:KKKLM4MFHHHHHH$9hlb MLLMMlb b KK4NTTTMb Kb KFTMFTTFb b *KJ Z? >IOTHD9P9**9b :MMTMMMMMllTXMMMMMMMv v v Z*v v v Z*v v v b b b b b b   SECTION: ADMINISTRATIONAREA:GENERAL ADMINISTRATIONSUBJECT:SAFEGUARDING PROTECTED HEALTH INFORMATION PURPOSE To inform the UAMS workforce on the proper procedures for safeguarding Protected Health Information (PHI). SCOPE UAMS Workforce DEFINITIONS Confidential Information includes information concerning UAMS research projects, confidential employee information, information concerning the UAMS research programs, proprietary information of UAMS, and sign-on and password codes for access to UAMS computer systems. Confidential information shall include Protected Health Information. Electronic Media means: (1) Electronic storage media including memory devices in computers (hard drives) and any removable/transportable digital memory medium, such as CD-ROM, DVD, floppy disks, magnetic tape or disk, optical disk, digital memory cards and flash drives; or (2) Transmission media used to exchange information already in electronic storage media. Transmission media include, for example, the internet (wide-open), extranet (using internet technology to link a business with information accessible only to collaborating parties), leased lines, dial-up lines, private networks, and the physical movement of removable/transportable electronic storage media. Certain transmissions, including of paper, via facsimile, and of voice, via telephone, are not considered to be transmissions via electronic media, because the information being exchanged did not exist in electronic form before the transmission. Electronic Protected Health Information (ePHI) means individually identifiable health information that is: Transmitted by Electronic media Maintained in Electronic media Received by Electronic Media Information System means an interconnected set of information resources under the same direct management control that shares common functionality. A system normally includes hardware, software, information, data, applications, communications, and people. Pre-Research or Review Preparatory to Research means the review of information or records prior to obtaining patient authorization and consent or prior to obtaining an IRB Waiver of Authorization in which the review is solely to prepare a research protocol, to determine if a research project is feasible, or for similar purposes preparatory to research. Protected Health Information (PHI) means information that is part of an individuals health information that identifies the individual or there is a reasonable basis to believe the information could be used to identify the individual, including demographic information, and that (i) relates to the past, present or future physical or mental health or condition of the individual; (ii) relates to the provision of health care services to the individual; or (iii) relates to the past, present, or future payment for the provision of health care services to an individual. This includes PHI which is recorded or transmitted in any form or medium (verbally, or in writing, or electronically). PHI excludes health information maintained in educational records covered by the federal Family Educational Rights Privacy Act and health information about UAMS employees maintained by UAMS in its role as an employer. UAMS Workforce means for purposes of this Policy, physicians, employees, volunteers, trainees, and other persons whose conduct, in the performance of work for UAMS, is under the direct control of UAMS, whether or not they are paid by UAMS. For additional definitions:  HYPERLINK "http://hipaa.uams.edu/DEFINITIONS%20-%20HIPAA.pdf" http://hipaa.uams.edu/DEFINITIONS%20-%20HIPAA.pdf POLICY UAMS workforce must undertake appropriate administrative, technical and physical safeguards, to the extent reasonably practicable, to preclude Protected Health Information (PHI) from intentional or unintentional use or disclosure in violation of the HIPAA regulations. Electronic Protected Health Information (ePHI) and other confidential information located on UAMS Information Systems or Electronic Media must be protected against damage, theft, and unauthorized access. This includes all ePHI and confidential information received, created, maintained and transmitted by UAMS. Confidential information must be consistently protected and managed through its entire life cycle, from origination to destruction. Controls must be in place for hardware and Electronic Media moving into, out of, and within UAMS. Information Systems and Electronic Media for which this policy applies include, but are not limited to, computers (both desktop and laptop), floppy disks, backup tapes, CD-ROMs, DVDs, zip drives, portable hard drives, digital memory cards, flash drives and PDAs. PROCEDURE While access to PHI, and conversations regarding a patient, often must occur freely and quickly in treatment settings, the following safeguards should take place to the extent reasonably practicable: 1. Protecting Printed Information: Route incoming written correspondence through the smallest number of viewers possible. Pre-address all envelopes to individuals or specific departments within UAMS. Keep photocopying of documents containing PHI to a minimum. Shred or place unneeded copies containing PHI in a security bin. Any documents containing PHI should be placed with identifying information face down on counters, desks, and other places where patients or visitors might see them. These documents should not be left out on desks or countertops after business hours and should be placed in locked storage bins, locked desk drawers, or other secure areas. When discarding records or items containing PHI, use a shredder or place the records and items in a bin specifically designated as a shredding bin where the records and items will be retrieved for shredding. All shredding bins should be placed in an area where unauthorized persons cannot easily view or access the PHI contained in the shredding bin. When paper documents are in transit from location to location, place the documents in sleeves, bags, or envelopes that are sealed and clearly addressed to the recipient. When transporting medical records, they should never be left unattended and records should be covered or turned over so that PHI is not visible to casual observers. IV bags and other medically related material that is not suitable for shredding and is placed in regular trash should have all patient identifiers removed or obliterated. Locate fax machines in non-public areas. Refer to UAMS  HYPERLINK "http://www.uams.edu/AdminGuide/Win03119.html" Faxing of PHI and Other Confidential Information Policy, 3.1.19. 2. Bulletin Boards: Bulletin boards located in areas that may be seen by patients or visitors should not contain any documents containing PHI, unless the patient has agreed to the display by written or documented verbal permission. This would include baby pictures, cards and notes of appreciation and childrens signed art work. 3. Storage of Paper-Based Data: After business hours or when not in use by authorized personnel, documents or items containing PHI should be supervised or kept in a locked desk, locked cabinet or other locked location. Storage of documents containing PHI, whether on-site or off-site, must be locked at all times except during use by authorized personnel. Limit the number of keys given to employees. Provide keys to areas and locked cabinets to only those employees whose job responsibilities require or necessitate access to the areas or cabinets where PHI is stored or located. Limit access to filing areas and off-site storage facilities where records or items containing PHI are located to only those employees whose job responsibilities require access to such areas. 4. Shredders: Place shredder machines in a convenient location. If you plan to purchase a shredder, a cross-cut shredder is recommended as the security standard. Encourage all staff to use the shredder machines. Shred daily. 5. Outsourcing Shredding: Contract with a reputable vendor. Agree upon acceptable timeframes between pick up and destruction. Review the security of containers in which paper is transported off the site. Monitor the vendors performance regularly. 6. Physical Security: All persons (patients, visitors, vendors and others) who are not authorized to have access to PHI should be supervised, escorted or observed when visiting or walking through an area where PHI may be easily viewed or accessed. Utilize a system of controlling the distribution of keys. Require all employees to return all keys upon the effective date of termination of their employment with UAMS, or when the job responsibilities of the employee no longer require access to the areas or cabinets accessed by the key or keys. Doors should be locked at night, unless authorized personnel need access to the rooms or areas after hours. Access to areas containing PHI should be monitored and controlled to the extent possible. 7. Conversations: Conversations with a patient and other conversations in which PHI is being discussed, over the phone or in person, should be made, to the extent possible, in a manner or in a location (or both) where persons who are not intended to be a part of the conversation or who are not authorized to receive the PHI cannot easily overhear the conversation. When having a conversation in a public area with a patient, the patients family members, or other conversations in which PHI is discussed, conduct the conversation in a lowered voice, to the extent possible, so that unauthorized persons cannot easily overhear the conversation. Avoid using patients names or the names of patients family members in public hallways and elevators when persons who are not authorized to receive the information are present. In an emergency situation, where a patient is hearing impaired or in other situations where the ability to discuss PHI quietly and in private may not be practicable, take reasonable precautions to preclude the disclosure of PHI to the extent possible. 8. Paging: Overhead paging of patients and patients family members should be kept to a minimum. Only request the page if it is urgent and you are unable to locate the patient or family by other means. Only the minimum amount of information should be used when paging. For example, Mr. John Jones, please return to surgery waiting room. Do not request overhead pages for patients who have asked to be omitted from the patient directory. 9. X-Ray Lightboards and Nursing Station Whiteboards: Place all X-ray lightboards and nursing station whiteboards in an area generally not accessible by the public or readily visible to the public, or implement other safeguards which reasonably limit incidental disclosures to the general public. 10. Sign-In Sheets: Information on patient sign-in sheets should only include the patients name and appointment date and time. Do not include unnecessary information such as patient complaint, date of birth, or other information that is not necessary for the sign-in sheet. Use of peel-off labels for patients to sign, which are then transferred to a sign-in sheet kept outside the view of other patients, is preferable to a sign-in sheet in view of other patients. 11. Charts in Chart Holders Outside Exam Room: When placing patient records in chart holders outside of examination rooms, turn the records with the front cover facing the wall or with identifying information otherwise covered, so the patients information is not visible to passersby. 12. Voice Mail/Answering Machine Messages: When leaving a voice mail or answering machine message for a patient, always limit the amount of information disclosed to the minimum necessary, such as the provider name and telephone number, or other information necessary to confirm an appointment, or to ask the individual to call back. For example, when confirming an appointment, the information should be limited to appointment date and time, the doctors name, and a contact name and telephone number. Do not leave messages that include laboratory and test results, or any other information that links a patient's name to a particular medical condition or the type of clinic or specialist the patient is seeing. (For example, "I am calling to remind Mrs. Brown of her chemotherapy treatment tomorrow at 10:00, is not an appropriate message.) Generally, when leaving a message with a family member or friend answering the patients phone, the message should be limited to a request for the patient to return your call; and you may leave your name, telephone number, and the fact that you work at UAMS. A patient's verbal permission or written authorization is NOT needed in these circumstances when leaving a message for the patient as directed by this policy and procedure. 13. E-Mail: All e-mail messages must include a confidentiality statement, including messages sent internally or outside UAMS, and regardless of whether the e-mail message contains PHI. E-mail is encrypted automatically inside the UAMS network. Any e-mails sent outside of the UAMS network containing Confidential Information, including ePHI, must be encrypted. Refer to UAMS  HYPERLINK "http://www.uams.edu/adminguide/Win07112.html" E-Mail Access and Usage Policy, 7.1.12. 14. Faxing: For documents containing PHI that are faxed internally or outside UAMS, please refer to the UAMS  HYPERLINK "http://www.uams.edu/AdminGuide/Win03119.html" Faxing Protected Health Information or Other Confidential Information Policy, 3.1.19. 15. Safeguarding ePHI and other Confidential Information in Electronic Format: Access to ePHI is through user authentication and password. Access to Information Systems and Electronic Media containing ePHI and other confidential information at UAMS must be provided only to authorized UAMS workforce members who have a need for specific access in order to accomplish a legitimate task. UAMS workforce members must not attempt to access, duplicate or transmit Electronic Media containing ePHI and other confidential information for which they do not have appropriate authorization. Refer to  HYPERLINK "http://www.uams.edu/adminGuide/WIN07304.html" Information Access Management Policy, 7.3.04 and  HYPERLINK "http://www.uams.edu/AdminGuide/Win03115.html" Confidentiality Policy, 3.1.15. User access may require specific training depending on the system before access is allowed. UAMS Electronic Storage Media such as, CDs, diskettes and DVDs that contain ePHI should be clearly marked as confidential. UAMS Information Systems and Electronic Media containing ePHI or other Confidential Information should be located and stored in secure environments that are protected by appropriate security barriers and entry controls. UAMS Information Systems and Electronic Media containing ePHI and other confidential information must be disposed of properly when no longer needed. Electronic Media containing ePHI or other Confidential Information that is to be disposed of permanently must be physically destroyed, and may be accomplished in one of the following ways: Break diskettes or otherwise render it impossible to re-insert it into a PC drive Punch a hole through the entire diskette Cut CDs into pieces with standard tin-snips Request destruction of CDs and diskettes by a shredding company contracted with UAMS to destroy diskettes and CDs Hard drives and tapes are to be destroyed by UAMS IT Department or its designee. Contact UAMS Technical Support with questions regarding disposal. Disposal of UAMS Information Systems and equipment containing ePHI must be tracked and logged. At a minimum, such tracking and logging must provide the following information: Date of disposal Who performed the disposal Brief description of media or Information Systems that was disposed ePHI should be removed from equipment or Information Systems that are being returned to the vendor. If that is not possible, a Business Associate Agreement must be in place before the equipment is returned to the vendor. Contact UAMS Office of Contract Services for more information about Business Associate Agreements. ePHI on UAMS Electronic Media must be removed before such electronic media can be re-used. UAMS Workforce members moving UAMS Information Systems and Electronic Media containing Confidential Information, including ePHI, into, out of, and within the workplace must maintain records of such movement.xe "trading partner" When necessary, a retrievable, exact copy of data will be created before equipment is moved. ePHI and other confidential information used or sent for Review Preparatory to Research may not be removed from UAMS. Refer to  HYPERLINK "http://www.uams.edu/AdminGuide/Win03127.html" HIPAA Research Policy 3.1.27. ePHI and other confidential information used or sent outside the UAMS Network should be encrypted. 16. Transporting and/or Accessing UAMS Confidential Information off campus for official business use. Confidential Information, including PHI, is not to be removed from UAMS by members of the Workforce without prior approval and a signed confidentiality agreement on file. For employees who work from home part-time or full-time in an official UAMS Capacity refer also to UAMS Administrative Guide  HYPERLINK "http://www.uams.edu/AdminGuide/WIN03140.htm" Working from Home Policy 3.1.40. The Workforce member is responsible for maintaining the privacy and security of all Confidential Information that they may be transporting, storing or accessing off-site. This includes, but is not limited to: Protected Health Information and Electronic Protected Health Information Computers or mobile devices that contain or access Confidential Information. Storage media such as diskettes, CD-ROMs, DVDs, digital memory cards, and flash drives containing Confidential Information. Printed documents that contain Confidential Information. UAMS policies are in effect whether the Workforce member is working off-site or in a UAMS facility and include the following requirements: Electronic media and printed information must be transported and stored in a secure manner. The printing of confidential information from home computers should be kept to a minimum and only as needed in accordance with UAMS policies. All media containing PHI or ePHI must be disposed of appropriately and must never be placed in regular trash. This includes printed information, faxes, hard drives, diskettes and CDs. UAMS materials must be put away when not being used and kept in a secure location that is not accessible to others including children, spouse and visitors. Passwords must not be shared or accessible to family members or others Any Confidential Information or ePHI sent from workstations, laptops, PDAs and other mobile devices must be encrypted. Refer to  HYPERLINK "http://www.uams.edu/adminguide/Win03117.html" Mobile Device Safeguards Policy 3.1.17. Anti-virus software must be installed on all home computers and mobile devices used for UAMS business, and they must be password protected. Employees are required to maintain updates to current operating systems (ex. Microsoft updates/patches) Confidential Information must not be saved on local hard drives or other media except when necessary to perform UAMS job duties. All saved Confidential Information must be encrypted and deleted when no longer needed. Confidential Information including PHI must not be saved on public workstations such as in hotels and libraries. When away from the UAMS network, the use of web based applications to access ePHI such as WebChart and WebEPF should be minimized. When it is necessary to use resources outside of the UAMS network to access web based applications such as WebChart, be sure to delete Cookies, delete files and clear the history in your Browser. SIGNATURE: ________________________________ DATE: _________________________      EMBED MSPhotoEd.3  UAMS ADMINISTRATIVE GUIDE _____________ NUMBER: 3.1.38 DATE: 10/1/2003 REVISION: 9/19/2007 PAGE:  PAGE 1 of  NUMPAGES 8 nox " ] h i m n ƷzlaSES4 hulhNs56CJ\]aJhulhr5CJ\aJhulhNs5CJ\aJhulhaCJaJhulha5CJ\aJhulhYlCJaJh2CJaJhrCJaJhulhNsCJaJhulCJaJhulhNs5>*CJ\aJhulhul5>*CJ\aJhulhulCJaJhulhul5>*CJaJhulh$a5>*CJ\aJ h$a5hNs5>*CJ\aJ "9:QGkdj$$If0!!aytxIkd$$If0!!aytx$$d$Ifgdx 1$7$8$H$gdulPV^W:Cmnowx|||g$ d1$7$8$H$a$gd;e$ 1$7$8$H$a$gd;e$a$gd;e 1$7$8$H$gdulIkd$$Ifa0!00!aytx$$d0$Ifgdx  ] u o _$ ^a$gd;e $^a$gd;e$a$gd;e$a$gd;e$ d1$7$8$H$a$gd;e$ d1$7$8$H$a$gd2$ d1$7$8$H$a$gdr n X j k n "AZ_gꭟΟxj_SG_G_Ghulh9e>*CJaJhulhR>*CJaJhulh9eCJaJhulh9e5CJ\aJhulh!<CJaJhulh!<5CJ\aJhulhoo6CJ]aJhulhoo5CJ\aJhulhooCJaJhulhaCJaJhulhaCJaJhulhr5CJ\aJhulha5CJ\aJhulh wCJaJhulhNsCJaJ_xeV^`gd;e$dd[$\$^a$gd;e ^`gd;e$a$gd;e$ & F ^`a$gd;eY$ & F Eƀ &^`a$gd;e -./029:veTE7hulh9e5CJ\aJhulh9e5>*CJ\aJ hulh9eCJOJQJ^JaJ hulhaCJOJQJ^JaJ$hulha0JCJOJQJ^JaJ:jHHHh&h^;hulhNSCJUaJhulhaCJaJjhulhaCJUaJhulhaCJaJmH sH hulh}_CJ\aJhulh}_5CJ\aJhulhhCJaJhulh9eCJaJ/029:Ipqr}~FGjk$ & F h^a$gd;e$0^`0a$gd;e $^a$gd;e$7$8$H$a$gd;egd;e$a$gd;e^`gd;e:Irv#'.KSy2Bi|!Aepr{|ٸٸ٩ٞΞΞΞΞughulh9e5CJ\aJhulh9e5>*CJ\aJhulh+E5>*CJ\aJhulh wCJaJhulhCJaJhulh)"B*CJaJphhulhX,CJaJhulh'.CJaJhulhCJaJhulh)"CJaJhulhCJaJ hulh9eCJOJQJ^JaJ%|~EFGHIJhiF!G!~!!!!!ŷjV/jLjHHh&h^;hulhNS6>*B*CJU]aJph&hulhr6>*B*CJ]aJph/jhulhr6>*B*CJU]aJphhulhhCJaJhh~5CJ\aJhh9e5CJ\aJhulhcv 5CJ\aJhulh9e5CJ\aJh"5CJ\aJ hulh9eCJOJQJ^JaJhulh9eCJaJ&hulh9e5CJOJQJ\^JaJNOGH F!G!!!$a$gd;e $8^8a$gd;e$0^`0a$gd;e$l^`la$gd;e$ & F h^a$gd;e$80^8`0a$gd;e!!!!!!!!!!!""""""K#L#M#N#i#j#Z&[&ӻ{m_TFm_>h"CJaJhulhcv 5CJ\aJhulh'%@CJaJhh~5CJ\aJhh9e5CJ\aJhulh:5CJ\aJhulh9e5CJ\aJh"5CJ\aJhulh+E5CJ\aJhulh9eCJaJ/jhulhr6>*B*CJU]aJphhulh9e0JCJaJhulh:0J6CJ]aJhulh9e0J6CJ]aJ!""J#K#k#l#$$%%Y&Z&h&i&&$ & F 8^a$gd;e$a$gd;e$ h0^`0a$gd;e$ & F 8h^a$gd;e$ & F 8h^a$gd;e $ a$gd;e$a$gd;e[&\&]&f&g&&&&A'B'C'D'Y'Z'['>(?(@(A(B(C(T(U(X(1+2+3+4+5+B+ɶsesZRh"CJaJhulh 1CJaJhulh+E5CJ\aJhh/5CJ\aJhh9e5CJ\aJhulhcv 5CJ\aJhulh9e5CJ\aJh"5CJ\aJ%hulh9eCJaJfHq ̙hulh'%@CJaJhh~CJaJhh9eCJaJhulhcv CJaJhulh9eCJaJ&'2'3'@'A'['\'~''''((=(>(?( $^a$gd;e$ & F 8^a$gd;e$h0^h`0a$gd;e$ & F 8^a$gd;e$a$gd;e$ & F 8^a$gd;e$ 0^`0a$gd;e?(X(Y(<)=)i*j***1+2+D+F+,,--r.s.$ & F 8^a$gd;e$a$gd;e$h0^h`0a$gd;e$0^`0a$gd;e$ & F 8^a$gd;e$a$gd;e $^a$gd;eB+C+D+E+,,p/q/s/t/z/{/}/0000.1/101112131d1e1;2ܷܐvncXMhulh/CJaJhwEh9eCJaJhulh8CJaJhwECJaJhh9e>*CJ\aJhh9eCJ\aJhh9eCJaJhh/5CJ\aJhh9e5CJ\aJhulh85CJ\aJh5CJ\aJhulh9e>*CJaJhulh9e5CJ\aJhulh9eCJaJhh/CJaJs.o/p/|/}/?0@000/101f1h1[2\2p2q2 $h^ha$gd;e & F 8^gd;egd;e$80^8`0a$gd;e$ & F 8^a$gd;e$a$gd;e $^a$gd;e$ & F 8^a$gd;e;2Z2[2\2^2_2`2n2o2q223444647484a4b4c4d4R5S5̝̑xj\NCh0jh9eCJaJ *h0jh9eCJ\aJhulh/5CJ\aJh0jh9e5CJ\aJhulh85CJ\aJh0j5CJ\aJ *hulh9eCJaJhulh9e5CJ\aJhwEh/CJaJhwEh9eCJaJhulh8CJaJhulh9eCJaJhwECJaJhulhICJaJhulh@)CJaJhulh5k4CJaJq23444c4d4S5T555L7M78899V:$ & F 8^a$gd;e$807$8$H$^8`0a$gd;e$ & F 87$8$H$^a$gd;e$ & F 8^a$gd;e$a$gd;e $^a$gd;e$ & F 8h^a$gd;eS5T5V5W5X5}5~555P7S7U:W:Y:Z:[:a:b:c:ɻɔygUC1g"hulh/5CJ\aJmH sH "heh9e5CJ\aJmH sH "hulhu5CJ\aJmH sH "hulh9e5CJ\aJmH sH he5CJ\aJmH sH hulh9e>*CJaJhulh9eCJaJhulh+5CJ\aJhulh/5CJ\aJh0jh9e5CJ\aJhulh85CJ\aJhulh9e5CJ\aJh0j5CJ\aJ *hulh+5CJ\aJV:W:c:d:;;8<9<F<G<<=======^@@7A$ & F7$8$H$a$gd;e & Fgd;e  & F 8gd;e^gd;e & F 8^gd;egd;e $ & F a$gd;e$a$gd;ec:d:;;;;;;;; <<<-</<5<Ĺ桍fVF6hulh_0J6CJ]aJhulhr0J6CJ]aJhulh9e0J6CJ]aJLjHHh&h^;hulhNS6>*B*CJU]aJph&hulh_6>*B*CJ]aJph/jhulh_6>*B*CJU]aJphhulhaCJaJhulhaCJOJQJaJhulheCJaJhaCJaJhulh9eCJaJhulh9eCJaJmH sH 5<6<7<9<;<<<=<B<C<D<<<<<<1=9=:=;=<===нۇ`P@5hulh \CJaJhulh-ck0J6CJ]aJhulh9e0J6CJ]aJLjHHh&h^;hulhNS6>*B*CJU]aJph&hulh_6>*B*CJ]aJphhulh/CJaJhulh9e>*CJaJheh9eCJaJhulhuCJaJheCJaJhulh9eCJaJ/jhulh_6>*B*CJU]aJphhulh9e0JCJaJ==?=B=====????????˿yRB2hulh_0J6CJ]aJhulhoo0J6CJ]aJLj~HHh&h^;hulhNS6>*B*CJU]aJph&hulh_6>*B*CJ]aJph/jhulh_6>*B*CJU]aJphhulhooCJaJhulhe5>*CJ\aJhoo5>*CJ\aJh"Ph"P5CJ\aJh"Phoo5CJ\aJhulh_5CJ\aJhe5CJ\aJ????9@:@;@Y@Z@[@]@^@@@4A6A7ABκ΃vκbWLWA6WhulhooCJaJhulh wCJaJhulhCJaJhulhs CJaJ&hulhoo6>*B*CJ]aJphhulh_0JCJaJhulh_0J6CJ]aJLjKHHh&h^;hulhNS6>*B*CJU]aJph&hulh_6>*B*CJ]aJph/jhulh_6>*B*CJU]aJphhulh_B*CJaJphhulh_CJaJ7ABBfCCC DDEEEEE4F~$ & F! 7$8$H$a$gd;e$ & F! a$gd;e$ k ^a$gd;e$ & F pa$gd;e$ & F7$8$H$a$gd;e$ & F7$8$H$a$gd;e$ & F7$8$H$a$gd;e BeCfCDDDE^FiFjFGHHHHHIIIIIIIIIIWJ߻ߢԐaQChulhQ6CJ]aJhulh0J6CJ]aJ@jHHh&h^;hulhNS6CJU]aJhulh6CJ]aJ#jhulh6CJU]aJhulh!<CJaJhulh$8CJKHaJ jhulh*CJUaJh`-CJaJhulhCJaJhulh$8CJaJhulhs CJaJhulhQCJaJ4F5FvGwGGGHIIIii$ & F" p 7$8$H$a$gd;e$ & F" a$gd;e$ 8p 7$8$H$a$gd;e$ & F 8p 7$8$H$a$gd;e$ 8p 87$8$H$`8a$gd;e$ & F p 7$8$H$a$gd;e$  7$8$H$^ a$gd;e IIWJXJJJJGLHLMM $  a$gd;e $t^ta$gd;e$ & F' a$gd;e$a$gd;egd;e$ & F" p 7$8$H$a$gd;e$ 8p 87$8$H$^8`a$gd;e WJXJZJ\JiJJJJJJJjKKK"L#L$LиЪlW/lOjHHh&h^;hulhNS6>*B*CJU]aJhph)hulhCH6>*B*CJ]aJhph2jhulhCH6>*B*CJU]aJhphhulhWCJaJhhulh.-CJaJhhulhhA>*CJaJhulh.-5>*CJaJh*xhul5CJaJh*xhhA5CJaJh*xh!<5CJaJhulhhA5CJ\aJh*x5CJ\aJhulhs CJaJ$L=LCLDLELFLGLHLMMnMMMMM,N-NfNNNNNNOOOPPϵ}q}qh\P}PDDhulhWCJaJhhulhCJaJhhulh*xCJaJhh wCJaJhhulh wCJaJhhulhhACJaJh *hulh.-CJaJhhulh.-CJaJh#hulhW>*B*CJaJhph2jhulhCH6>*B*CJU]aJhphhulhW0JCJaJh!hulhS0J6CJ]aJh!hulhW0J6CJ]aJhMdMMeL$ & F'Eƀ &.a$gd;eL$ & F'Eƀ &.a$gd;eM-NfNgNNNPOOP5Q|QdRRYSTU $^a$gd;e $ & F'a$gd;e $8^8a$gd;e $ & F'a$gd;eL$ & F'EƀFa$gd;eP4Q|QQQQ9R:R;RbRcRdRRRXSYSTTTTTTTTϻymaUmIm=mhulhw9CJaJhhulhuCJaJhhulh~CJaJhhulh@SCJaJhhulh:CJaJh!hulhhA0J6CJ]aJhCjHHh&h^;hulhNS6CJU]aJhhulhhA6CJ]aJh&jhulhhA6CJU]aJhhulhhACJaJhhulhCJaJhhulhWCJaJhhulh.-CJaJhTTXU\U`UhUUUUV VV0V5VOVPVQVSVTVVVWVYVZV\V]V^V_V`VaVbVcVdVeVxVŽtdhhY>*OJQJ^JaJ(jhhY>*OJQJU^JaJhm(hrh[!jh[!UhulhCJaJh5CJaJhrh5CJaJhCJaJh2CJaJ *hulh.-CJaJhhulh~CJaJhhulh:CJaJhhulhw9CJaJh!UUUUUUUUUUUUUUUUUUUUVVVVPVRVSV $h^ha$gd;e $^a$gd;eSVUVVVXVYV[V\V]V^V_V`VaVbVcVdVWZW[W\W]W^W_W $h^ha$gd;egdul($$ ) p@ P !$0&d P gdul $$0gdulxVyVzV{VVVVVVVWWW!W4W;W*] hw5 hY5hw5>*]hY5>*]hhY5>*]hhY>*(jhhY>*OJQJU^JaJ(j}hhY>*OJQJU^JaJ.j8bH hhY>*OJQJUV^JaJ^W_WhulhCJaJ@ 00&P1hP:p$a/ =!"#$% h$$If!vh55#v#v:V !554aytxd$$If!vh55#v#v:V !554aytxv$$If!vh55#v#v:V a!55/ 04aytxDyK yK \http://hipaa.uams.edu/DEFINITIONS - HIPAA.pdfDyK yK Zhttp://www.uams.edu/AdminGuide/Win03119.htmlDyK yK Zhttp://www.uams.edu/adminguide/Win07112.htmlDyK yK Zhttp://www.uams.edu/AdminGuide/Win03119.htmlDyK yK Zhttp://www.uams.edu/adminGuide/WIN07304.htmlDyK yK Zhttp://www.uams.edu/AdminGuide/Win03115.htmlDyK yK Zhttp://www.uams.edu/AdminGuide/Win03127.htmlDyK yK Xhttp://www.uams.edu/AdminGuide/WIN03140.htmDyK yK Zhttp://www.uams.edu/adminguide/Win03117.html Ddb)R  S A?"?bu  DSl04Q 1 nI  DSl04PNG  IHDR~GsRGBPLTEVTT:?훚ihh755dt,ۀwDw<Pwgw |@,<wwS--xx@-w-;S8>w7wX$CwH $0ۀwDwPwgw@8H9p$ۀwИwxx@9998Hwwwww__9,ۀwxwxxxx9_wttۀwwwm\w@UAMS9H wȍww\WC9m\w@ 99hv$Q:-2C-x99 4ۀwxwDIwm\wDD: :lH9D:sD9 w pHYsod cmPPJCmp0712Hs tRNS,IDAThCYv( bޙ6ܞ>ԧ1h$! qk4vo;eW2z^iWjSvNxUw=y~=܇xJa z.цjp Sk/}{iŸ&!hL5j|\RpiL䁲!@ń9ʿ nސa!<,7{PWd˦{;0[lA*lbo M2-xfl]Â]\Aa{z T-װ \H:R[+&#e%x),fx2w)S"=={/!6#gkQiq%xGGqNcvFVkk} GSSrTJbx`=p%F8p ))=|y _I6|e S̒L|kU@Ƨ_o`3KE*bQ1{kCYKL_(L͔Cױ1ߒNlsHS)l׵k8X4[kW#cG螿|GKWV){LPBx: 'Y*ȡic7nά(Y?Mf?@ABCDEFGHIJKLMNOPQRSTUWXYZ[\]x`c{|efghijklmnopqrstuvwyz}~Root Entry  FZ? b Data VWordDocument BObjectPool  Z? Z? _1214396668@96>@) Z?  Z? Ole CompObjuObjInfo  !"#$%&') @96>@)#Microsoft Photo Editor 3.0 PictureMSPhotoEditor MSPhotoEd.39q Oh+'0 ,8 X d p |CONTENTS d(&CONTENTSV301TableSummaryInformation( ~G`VTT:?훚ihh755dt,ۀwDw<Pwgw |@,<wwS--xx@-w-;S8>w7wX$CwH $0ۀwDwPwgw@8H9p$ۀwИwxx@9998Hwwwww__9,ۀwxwxxxx9_wttۀwwwm\w@UAMS9H wȍww\WC9m\w@ 99hv$Q:-2C-x99 4ۀwxwDIwm\wDD: :lH9D:sD9 W                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       e%­|xq[c"f,vy 7ݛ[6ބQs@ BDR[3xWc_č ~wA0Z<϶ p>?_^*k|򋰾Јs!h(ˀm}\ͽ|,-!o#(^{֌GZ!SƑǬ"[8޸g8E-пtܟ‹ߔΏywoymZڡ܇)~N ,Q,_]8+۩5pΟCbKhhORɋQz]h7 Tr57seb=c:mIMgtxx;?:#78ćfuɂhݜ28 \aݣRJ0F#M'h[e0!C;\U% 3s~ TPKq 7gg:c?d  L+gC[08L@ش3a  ZRV/y#sy@Qԟ2ph}"4t7|(e#z`Jϳw,Sc/sAL+Q6gwuVT|?z[5D\ V6vzFxIVV rh$xfoFN!^N]=b%FH82 y&'W^K,&(03Vrb򘜎N[K\'؉dlo_%XZ TEHs,\s-@Ky;&|=TW#}Oxq c%cby0kx[+V]:OdJƔcV`RX_D&qX8#&L ?tL?h!#zB"'kĐV|dFFM8b(GIENDB` EDIT1A 3138 Safeguarding PHIStocktonDianaCNormalAdministrator2Microsoft Office Word@@VH? @VH? @VH?  B՜.+,D՜.+,L hp  UAMSDocumentSummaryInformation8 CompObj(q((N EDIT1A 3138 Safeguarding PHI TitleX 8@ _PID_HLINKSA6T-http://www.uams.edu/adminguide/Win03117.html >t,http://www.uams.edu/AdminGuide/WIN03140.htm T-http://www.uams.edu/AdminGuide/Win03127.html V-http://www.uams.edu/AdminGuide/Win03115.html U -http://www.uams.edu/adminGuide/WIN07304.html Z -http://www.uams.edu/AdminGuide/Win03119.html Q-http://www.uams.edu/adminguide/Win07112.html Z-http://www.uams.edu/AdminGuide/Win03119.html  .http://hipaa.uams.edu/DEFINITIONS - HIPAA.pdf @@@ NormalCJ_HaJmH sH tH >@>  Heading 1$@& 5>*\\@\  Heading 2$@&'5@B*CJOJQJ\^JaJph`@`  Heading 3$$ Hx*$@&a$5>*OJQJ\^J:@:  Heading 4$@&5\@@@  Heading 5$$@&a$5\DA@D Default Paragraph FontRi@R  Table Normal4 l4a (k(No List < @< Footer  !CJaJ@B@@  Body Text$a$ OJQJ^JBOB _01$7$8$H$^`0CJaJ8P@"8  Body Text 25\DC@2D Body Text Indent h^hNR@BN Body Text Indent 2$^a$H@RH  Balloon TextCJOJQJ^JaJ4@b4 Header  !.)@q.  Page Numberx"x CaptionI$$ ) p@ P !$0&d P 5\VS@V Body Text Indent 3$^`a$nOn hUK Body Text First Indent$7$8$`a$mH sH B^@B a Normal (Web)dd[$\$6U@6 a Hyperlink >*B*phFV@F SFollowedHyperlink >*B* ph_O "9:Cmnowx ]uo_ /029:Ipqr}~FGjkNOGHFGJKklYZhi23@A[\~  = > ? X Y 5>v?w???@AAAAWBXBBBBGDHDEEdEE-FfFgFFFPGGH5I|IdJJYKLMMMMMMMMMMMMMMMMMMMMNNNNPNRNSNUNVNXNYN[N\N]N^N_NbNcNdNOZO[O\O]O`O00 0 0 0 0 0 0 0 0 0000000000000000 0 0 000000000000000000000000 00 00 00 00 00 00 00 00 00 0 000 0000 00 00 00800Z 0Z0Z 0Z0Z 0Z0Z0Z0Z 0Z0Z 0Z0Z 0Z0Z 0Z0Z0Z0Z0Z 0Z0Z 0Z0Z 0Z0Z 0Z0Z0Z0Z 0Z0Z 0Z0Z 0Z0Z 0Z0Z0Z0Z 0Z0Z 0Z0Z 0Z0ZH0Z00) 00)00)H0Z0\* 0\*0\*0\*0\* 0\*0\*0\*0\* 0\*0\* 0\*0\* 0\*0\* 0\*0\*0\*0\* 0\*0\* 0\*0\*H0Z094 094094094094 094094 0594 0594 0594 0594 0594 0:94 0:94 0:94 0:94 0:94 0:94 0:94094! 094! 094! 094094 0:94094 0594094" 094" 094094" 094094" 094094094094094' 094094' 094094' 0HD94' 0HD94' 0HD94' 0HD94094' 094094' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0 gF94000000000000000000000000@0000@0000@0000@0000@00 0 <W@00 0 tW@00 0 <W@0@0@0000000 "9:Cmnowx ]uo_ /029:Ipqr}~FGjkNOGHFGJKklYZhi23@A[\~  = > ? X Y 5>v?w???@AAAAWBXBBBBGDHDEEdEE-FfFgFFFPGGH5I|IdJJYKLMMMMMMMMMMMMMMMMMMMMNNNNPNOZO[O`O00 0 0 0 0 0 0 0 0 0000000000000000 0 0 000000000000000000000000 00 00 00 00 00 00 00 00 00 0 000 0000 00 00 00800Z 0Z0Z 0Z0Z 0Z0Z0Z0Z 0Z0Z 0Z0Z 0Z0Z 0Z0Z0Z0Z0Z 0Z0Z 0Z0Z 0Z0Z 0Z0Z0Z0Z 0Z0Z 0Z0Z 0Z0Z 0Z0Z0Z0Z 0Z0Z 0Z0Z 0Z0ZH0Z00) 00)00)H0Z0\* 0\*0\*0\*0\* 0\*0\*0\*0\* 0\*0\* 0\*0\* 0\*0\* 0\*0\*0\*0\* 0\*0\* 0\*0\*H0Z094 094094094094 094094 0594 0594 0594 0594 0594 0:94 0:94 0:94 0:94 0:94 0:94 0:94094! 094! 094! 094094 0:94094 0594094" 094" 094094" 094094" 094094094094094' 094094' 094094' 0HD94' 0HD94' 0HD94' 0HD94094' 094094' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0gF94' 0 gF940000000000000000000000000@0@000n 0   n :|![&B+;2S5c:5<==?BWJ$LPTxV^W_W,13568:=?ACDEFHKLOPST:_!&?(s.q2V:7A4FIMMUSV_W-/02479;<>@BGIJMNQR^W. -~346444:57777:8Z8AAAC#DDDI:JbJ_OXXXXXXXXX(*:!@   @ 0(  B S  ?H0(  _O OLE_LINK1 OLE_LINK2 _Hlt147636090 _Hlt147636091 _Hlt147637802 _Hlt14763780344AA`O@@@@nn44AA`O!7 8 rv)-jn9)D)x))[2a233O5S555 6 6(7,79 9p9t9L:P:::Q=U=5>9>w?{?N@R@AAAAGGIIIILL MMONPNPNRNRNSNSNUNVNXNYN[N\N^N^NdNdN;OEOJOYO]O`Ox$-))R6\65>9>w?{?AAAABB-N4NPNPNRNRNSNSNUNVNXNYN[N\NFOJO]O`O333333333333EEXjkn !AeGHNNKLZ[AB}}~~? @ 2#3#p'q'}'}'@(@(((0)1)\*^*2,2,3,3,4,6,S-S-T-V---M/M/0011W2Y23394;4=5?5555555554969::====i>j>v?v???@@AAAAWBWBXBZBBBBBGDGDnEEEeFgFgFFFXKKKKKMMONPNPNRNRNSNSNUNVNXNYN[NdNNNNOOO0O4O;OEOJOYOZOZO[O]O`OPNPNRNRNSNSNUNVNXNYN[N\N]O`O'[ 8@ a 2I^F%BGL [Qs!b["[<u&r\gP'4s_'l.j,-tX@-h o/j^/9x1,H8 L:6 9n:5;Ư/2/? rQL0?& qDBH4]XBGL@FJ:6%LTgVPha3QjkTo +T?G?4Wb'cXR Yf|4`rtzb7.k@ZgqP^rVqgr<54,v.%{9. z3f|~VzV^V`zo(.pp^p`OJQJ^Jo(@ L@ ^@ `L.^`.^`.L^`L.^`.PP^P`. L ^ `L. ^`o(hH.^`6o(hH. L^`LhH.   ^ `hH.   ^ `hH. xLx^x`LhH. HH^H`hH. ^`hH. L^`LhH. 88^8`o(hH. pp^p`hH. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH. 88^8`o(hH. pp^p`hH. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH. ^`o(hH. ^`hH. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH. 88^8`o(hH. pp^p`hH. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH. ^`o(hH. ^`hH. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH.88^8`5o(hH. pp^p`hH. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH.h^`o(.h  ^ `OJQJ^Jo(h\ \ ^\ `OJQJ^Jo(xx^x`.HH^H`.L^`L.^`.^`.L^`L.h@ L@ ^@ `Lo(.h^`OJQJ^Jo(oh^`OJQJ^Jo(hdd^d`OJQJ^Jo(h44^4`OJQJ^Jo(oh^`OJQJ^Jo(h^`OJQJ^Jo(h^`OJQJ^Jo(oht"t"^t"`OJQJ^Jo( ^`o(hH. pp^p`hH. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH.   ^ `CJaJo(.  ^ `.xLx^x`L.HH^H`.^`.L^`L.^`.^`.X LX ^X `L. ^`o(hH. ^`hH. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH. ^`o(hH.^`6o(hH. ^`o(hH.   ^ `hH.   ^ `hH. xLx^x`LhH. HH^H`hH. ^`hH. L^`LhH.h ^`hH.h pp^p`hH.h @ L@ ^@ `LhH.h ^`hH.h ^`hH.h L^`LhH.h ^`hH.h PP^P`hH.h  L ^ `LhH. ^`o(hH. ^`hH. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH. 88^8`o(hH. pp^p`hH. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH.^`6o(hH. ^`hH. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH. 88^8`o(hH.^`o(. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH.h^`.h  ^ `.h L ^ `L.hxx^x`.hHH^H`.hL^`L.h^`.h^`.hL^`L.h ^`o(hH. ^`hH. $ $ ^$ `o(hH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH. 88^8`o(hH. pp^p`hH. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH. ^`o(hH. 88^8`hH. L^`LhH.   ^ `hH.   ^ `hH. xLx^x`LhH. HH^H`hH. ^`hH. L^`LhH. 88^8`o(hH. pp^p`hH. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH.^`o(.h pp^p`5\o(.@ L@ ^@ `L.^`.^`.L^`L.^`.PP^P`. L ^ `L.h,P^`P56B*CJOJQJ\]^JaJo(phh^`OJQJ^Jo(ohpp^p`OJQJ^Jo(h@ @ ^@ `OJQJ^Jo(h^`OJQJ^Jo(oh^`OJQJ^Jo(h^`OJQJ^Jo(h^`OJQJ^Jo(ohPP^P`OJQJ^Jo( ^`o(hH.T ^`o(hH.T L^`Lo(hH.   ^ `hH.   ^ `hH. xLx^x`LhH. HH^H`hH. ^`hH. L^`LhH. ^`o(hH.^`6B*o(phhH.T ^`o(hH.   ^ `hH.   ^ `hH. xLx^x`LhH. HH^H`hH. ^`hH. L^`LhH. ^`o(hH. ^`hH. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH. ^`o(hH. ^`o(hH.T L^`Lo(hH.   ^ `hH.   ^ `hH. xLx^x`LhH. HH^H`hH. ^`hH. L^`LhH.h^`.0^`06B*]o(ph.hpLp^p`L.h@ @ ^@ `.h^`.hL^`L.h^`.h^`.hPLP^P`L. 88^8`o(hH.pp^p`o(. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH. 88^8`o(hH. ^`hH. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH.88^8`5o(hH. ^`hH. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH. ^`o(hH.^`6o(hH.T L^`Lo(hH.   ^ `hH.   ^ `hH. xLx^x`LhH. HH^H`hH. ^`hH. L^`LhH. 88^8`o(hH. pp^p`hH. @ L@ ^@ `LhH. ^`hH. ^`hH. L^`LhH. ^`hH. PP^P`hH.  L ^ `LhH. hh^h`o(hH. ^`hH. pLp^p`LhH. @ @ ^@ `hH. ^`hH. L^`LhH. ^`hH. ^`hH. PLP^P`LhH. ^`o(hH.^`6o(hH.T L^`Lo(hH.   ^ `hH.   ^ `hH. xLx^x`LhH. HH^H`hH. ^`hH. L^`LhH.h ^`o(hH.h ^`hH.h pLp^p`LhH.h @ @ ^@ `hH.h ^`hH.h L^`LhH.h ^`hH.h ^`hH.h PLP^P`LhH.'f|4`[ a3Q\gP'VP@-s_'qDBz3f|4,v5;%GI6%LtzbqgrQs!.kgq<u&j,-8L0? +TJ a ^r9x1%{kT'cXo/2/?:6 9?4WGL ["]XB''8*         6,         6,                 6,        (D                                 2<         6,                \r|,                        6,         6,        B7 &       0        .:²2ؠC               "        6,S       |        2         6,         6,        \r        1 L/Po cv $ 5 h { *xiyyL~r6@MCH}d-![!\<"$MG$DA%@)l)X,s, -`-'.A.c.Ww0 1B1q2%745k4/ 6$8 I87W9w99;!<T<.?X?'%@A^xA BrB:1C+E2F/ Gw4G8VI LaM"PRPR@SNSGUFUhU5V VdVY r[ \|]n^_a$aJ%abe;e[eih0j-ck lolo! ooo\rsDs1tytauw`|dl}5II2:Hum&"Ttpgbs 9ehAQD &Jd}"v xCr&a_oX[2/6Jo%NoEQ[GOSYe8US+)"m(.-Yl!:K8)*-r:jEnNswE7"VUs" wVZgh$"EuYQ/ ,glK>PW}_ul'.[S x~h^ "9:CmnPNRNUNXN[NZO`Oy0y0y0y0y0@t~_O@Unknown Paula Cogerdobbinswilliamn G: Times New Roman5Symbol3& : ArialMCentury Schoolbook7&  Verdana3z Times5& zaTahoma?5 z Courier New;Wingdings"h Rf Rf Rf B( B(!4d(N(N 2q? V2EDIT1A 3138 Safeguarding PHIStocktonDianaC Administrator'                           ! " # $ % &   FMicrosoft Office Word Document MSWordDocWord.Document.89q