| | | I. PURPOSE | | To establish the requirements and procedures for revising the Department of Mental Health (DMH) Notice of Privacy Practices (NPP) in adherence to applicable federal and state law including the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. This policy outlines the review, approval, and implementation process for material changes, revisions, and amendments to privacy practices addressed in the NPP to ensure regulatory compliance and consistency across Los Angeles Health Agencies where applicable. DMH Contractors and/or Business Associates shall maintain internal policies and procedures governing amendments to their privacy practices and NPPs that are consistent with applicable law, their organizational operations and requirements set forth in this policy. | II. DEFINITIONS | There are no definitions associated with this policy. | | III. POLICY | DMH shall revise its privacy practices and amend its NPP as necessary to reflect material changes in: - Federal and State laws or regulations.
- Organizational/operational practices affecting the use or disclosure of Protected Health Information (PHI);
- Individual rights under applicable privacy laws; or
- Compliance findings, risk assessments, or audit determinations
In its NPP, DMH reserves the right to change its privacy practices and make the revised provisions effective for all (PHI) it maintains, including PHI created or received prior to the effective date of revision, provided that the NPP is properly revised and issued. | | IV. PROCEDURES | | | | V. AUTHORITY | | HIPAA, 45 CFR Sections 164 and 165 | VI. ATTACHMENTS | | There are no attachments associated with this policy. | | |