HIPAA Privacy Manual
Section 19: Record Keeping
Policy:
UTD will maintain accurate and complete documentation of Protected Health Information (PHI).
Procedure:
Records kept for PHI may include, but are not limited to:
- All policies and procedures
- Authorization forms
- Notice of Privacy Practices
- Business associate contracts
- Requests for inspection/copying, including denials
- Requests for amendment and the responses to those requests
- Request for Accounting of Disclosure of PHI, and copy of account log give to patients
- Education and training logs
- Complaints received and resolutions of same
- Requests for restrictions/confidential communication and agreement/denial
- Medical Records
- Billing/Payment Records
- Patient Acknowledgment of Privacy Notice
Last Updated: July 24, 2007
