Okla. Admin. Code § 340:2-8-5

Current through Vol. 42, No. 7, December 16, 2024

Section 340:2-8-5 - Privacy officer

(a) The Oklahoma Department of Human Services (DHS) designated a privacy officer to perform the required functions, per Section 164.530 of Title 45 of the Code of Federal Regulations. The contact information is: Oklahoma Department of Human Services, Privacy Officer, PO Box 25352, Oklahoma City, Oklahoma 73125.

(b) The privacy officer is responsible for:

(1) developing and implementing DHS privacy policy;

(2) making decisions regarding the use and or disclosure of protected health information (PHI) when requested for the purpose of:

(A) judicial and administrative proceedings;

(B) law enforcement investigations;

(C) research; and

(D) marketing;

(3) reviewing a denial for a client's access to his or her own PHI for reasons indicated in Oklahoma Administrative Code 340:2-8-4(a)(1)(C), and taking appropriate action following the review;

(4) receiving complaints regarding the use or disclosure of PHI from external and internal sources, and taking the appropriate action following the review;

(5) ensuring proper business associate agreements contain the appropriate language and provisions as required by the Privacy Rule; and

(6) receiving complaints regarding business associate activities or practices, and taking appropriate action following the review.

Okla. Admin. Code § 340:2-8-5

Added at 20 Ok Reg 2907, eff 8-21-03 (emergency); Added at 21 Ok Reg 784, eff 4-26-04

Amended by Oklahoma Register, Volume 36, Issue 24, September 3, 2019, eff. 9/16/2019