In this assignment, you will continue to put yourself in a Privacy Officer role as you develop a contingency plan as described in Chapter 13 (pp. 309-313). There are several parts to a contingency plan that are required by HIPAA Security Rule (45 CFR 164.308(a)(7) that must be included to secure ePHI: Risk assessment and analysis in your course project) Downtime and contingency planning Data backup Disaster recovery Emergency mode of operation For this assignment, you must write a 1-page document including the elements shown above. Explain what will happen during downtime and what is the contingency plan for the health information department. Next, include how data backup will take place. Keep in mind that data backup could already be a part of daily operations. If so, include a description of the backup process and how employees can access data during emergency operations. Your plan should also include how the health information department will recover. How will the department return to normal operations following the emergency or disaster? Lastly, explain what will happen with data collection during the emergency mode of operation. For example, how will the newly collected information be protected? What happens to employees (how do employees report to work? What is the impact on the core processes (explain a minimum of 3 functions, data analysis, release of information, coding, etc.)? For a Sample Contingency Plan see Figure 13.6 on page 312 in Fundamentals of Law. YOUR SUBMISSION SHOULD ALSO INCLUDE A COVER PAGE AND THE REFERENCE PAGE. Cover pageinclude who you prepared the paper for, who prepared it, and the date. Use headers on your submission (which can be consistent with the items identified above). Headings will help with organizing the information and make it easier to read and identify items as completed. Referencesuse the citation format as specified in the Syllabus. Follow the APA Guidelines for citing your references in the content on and the reference page. Figure 13.6 Sample contingency plan 1. Facility name: 2. Department name: 3. Plan originator: 4. Date: 5. Major function: Maintenance of an accurate MPI 6. Disaster: Extended power outage 7. Assumptions: An ice storm has resulted in an extended power outage. The majority of the staff is able to report to work. 8. Existing process detail: The MPI contains the patient's name and medical record number. When a patient is admitted, the registration staff accesses the MPI to determine whether the patient already has a medical record number or whether a new number must be generated. HIM staff also accesses the MPI when they need a medical record number to pull medical records for a current hospitalization, to accompany a bill for payment, for continuing care, for quality monitoring or legal action, and to number documents for placement in the paper record. The MPL is generated by entries made by patient registration staff into the admission/discharge tracking system. The accuracy of the numbers assigned is verified by HIM. 9. If-then scenarios: If patient registration staff does not have access to the MPI when admitting a patient, the following might result: The registration system or registrars will assign new numbers, creating duplicates that may cost $20 per set to correct The registrars will issue no numbers and patient health information will have to be matched to patients using account numbers, admission or discharge dates, or birth dates. Medical record numbers will have to be assigned and entered into the database at a later date If HIM staff members do not have access to an MPI, records cannot be pulled for any reason or provided to anyone. 10. Interdependencies: Registration staff, patient care areas, transcription, billing, and external customers including the patient, third-party payers, attorneys, and accreditation and standards organizations have a need for the patient medical records and therefore need a functional MPI. 11. Solutions and alternatives