Department Operating Regulations
Chapter 8 - Regulatory Compliance
- 8.005 - Notice of Privacy Practices Procedures
- 8.010 - Amendment of Protected Health Information
- 8.020 - Consumer Right to Request Restrictions on the Use or Disclosure of Protected Health Information (PHI)
- 8.030 - Access to Consumer Protected Health Information by Consumer, Parent, Guardian or Personal Representative
- 8.040 - Access to Consumer Protected Health Information (PHI) by Department of Mental Health Staff, Volunteers or Students
- 8.050 - Policy and Procedures for Obtaining Authorization for the Disclosure of Protected Health Information
- 8.060 - The Provision of an Accounting of Disclosures of Protected Health Information to Consumers
- 8.070 - Policy and Procedures for the Verification of Identity and Authority of Requestor
- 8.080 - Ensuring Confidentiality of Protected Health Information for DMH Staff Working Away from a Facility Setting
- 8.090 - Mandatory HIPAA Privacy and Security Training
- 8.100 - Designated Record Sets
- 8.110 - Retention and Destruction of Protected Health Information
- 8.140 - HIPAA Complaint Process
- 8.150 - HIPAA Minimum Necessary Standard
- 8.160 - HIPAA Sanctions
- 8.170 - External PHI Data Request Process
- 8.300 - User Access to Electronic Data
- 8.340 - Using Email Containing PHI
- 8.350 - Information Security Incidents
- 8.370 - Security Maintenance
- 8.380 - Workstation Use and Security
- 8.390 - Risk Management