In this assignment, you will continue to put yourself in a Privacy Officer role as you develop a contingency plan as described in Chapter 13 (pp. 309-313). There are several parts to a contingency plan that are required by HIPAA Security Rule (45 CFR 164.308(a)(7) that must be included to secure ePHI:

Risk assessment and analysis (in your course project)

Downtime and contingency planning

Data backup

Disaster recovery

Emergency mode of operation

For this assignment, you must write a 1-page document including the elements shown above. Explain what will happen during downtime and what is the contingency plan for the health information department. Next, include how data backup will take place. Keep in mind that data backup could already be a part of daily operations. If so, include a description of the backup process and how employees can access data during emergency operations. Your plan should also include how the health information department will recover. How will the department return to normal operations following the emergency or disaster? Lastly, explain what will happen with data collection during the emergency mode of operation. For example, how will the newly collected information be protected? What happens to employees (how do employees report to work? What is the impact on the core processes (explain a minimum of 3 functions; data analysis, release of information,

coding, etc.)?

DeVry University Hospital

POLICY TEMPLATE

Policy Title

Responsible Executive

Responsible Office

Endorsed byWho approved policy and date approved

ContactDivision Chief (CIO, COO, etc.)

Effective dateFirst version: (Date) Current Major Version (Date)

Last Updated(Date)

I. Policy Statement (Purpose of the policy)

II. Who Is Affected By This Policy

III. Definitions (Specific definitions related to the use of this policy)

IV. Policy (provide 2-3 sentences explain the policy)

V. Responsibilities (Who is expected to adhere to this policy and are there any specific responsibilities by role)

VI. Related Policies, Procedures, Standards and Templates

VII. Policy Review Cycle (At a minimum how often should this policy be reviewed)