Adopt forms and policies. The JCAAI has posted a sample set of HIPAA policies covering most areas where you are required to have a policy. You can examine and download this set of policies by clicking here. The fact that we have given a policy does not mean that you can just file this in your HIPAA binder and take no further action. Each office must look at the policy and its corresponding section in this Compliance Program and then draft specific policies for your office. Each office will differ and therefore, we cannot provide you with the final draft. You will find as you look at our forms, a variety of choices for you to add into your policy. The forms that the JCAAI has online are as follows:

• Notice Regarding Privacy of Personal Health Information (NPP)
• Authorization for Use or Disclosure of Information
• Authorization for Use or Disclosure of Information including Authorization for Marketing.
• Model letter for denial of request to amend Protected Health Information
• Documentation of Good Faith Efforts to obtain signed acknowledgement of delivery of NPP
• Model Business Associate Agreement
• Documentation of Employee Training
• Business Associate Agreement and Amendment Log
• Access Denial Log
• Amendment Request Log
• Research Disclosure Log
• Accounting Request Log
• Alternative Communication Request Log
• Further Restriction Request Log
• Complaint Log
• Routine Uses of PHI – Workforce Activities
• Routine Uses – Minimum Necessary Standard/Workforce
• Routine Requests for PHI – Minimum Necessary Standard
• Routine Disclosures of PHI – Minimum Necessary Standard
• Non-Routine Disclosures/Requests for Disclosure – Minimum Necessary Standard