{"id":269,"date":"2009-09-11T16:05:00","date_gmt":"2009-09-11T16:05:00","guid":{"rendered":"https:\/\/wordpress-dev.med.unc.edu\/hr\/policies\/hipaa-policies-and-training\/compliance-work-plan-principle-function\/"},"modified":"2018-01-10T09:55:31","modified_gmt":"2018-01-10T14:55:31","slug":"compliance-work-plan-principle-function","status":"publish","type":"page","link":"https:\/\/www.med.unc.edu\/hr\/policies-2\/hipaa-policies-and-training\/compliance-work-plan-principle-function\/","title":{"rendered":"Compliance Work Plan Principle Function"},"content":{"rendered":"

<\/p>\n

<\/p>\n

<\/p>\n

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule provides federal protections for personal health information held by covered entities and gives patients an array of rights with respect to that information. At the same time, the Privacy Rule is balanced so that it permits the disclosure of personal health information needed for patient care and other important purposes.<\/p>\n

SOM and UNC Health Care System Policy: <\/span><\/h2>\n

It is the policy of the UNC School of Medicine and the UNC Health Care System to provide training on HIPAA Privacy\/Security regulations to all employees, volunteers, and students employed by either entity with thirty days of initial employment. Further, the UNC School of Medicine requires all employees to update HIPAA training on an annual basis.<\/p>\n

In addition, the University\u2019s Department of Environment, Health, and Safety (EHS) has job specific annual training and immunization requirements. It is essential that SPA and EPA Non-Faculty employees complete such requirements as necessary. A matrix of EHS requirements for specific work environments can be accessed here; http:\/\/ehs.unc.edu\/training\/requirements.shtml. <\/a><\/p>\n

SOM Policy:<\/span><\/h2>\n