SECTION 340:2-8-5. Privacy officer  


Latest version.
  • (a)   The Oklahoma Department of Human Services (DHS) designated a privacy officer to perform the required functions, per Section 164.530 of Title 45 of the Code of Federal Regulations. The contact information is: Oklahoma Department of Human Services, Privacy Officer, PO Box 25352, Oklahoma City, Oklahoma 73125.
    (b)   The privacy officer is responsible for:
    (1)   developing and implementing DHS privacy policy;
    (2)   making decisions regarding the use and or disclosure of protected health information (PHI) when requested for the purpose of:
    (A)   judicial and administrative proceedings;
    (B)   law enforcement investigations;
    (C)   research; and
    (D)   marketing;
    (3)   reviewing a denial for a client's access to his or her own PHI for reasons indicated in Oklahoma Administrative Code 340:2-8-4(a)(1)(C), and taking appropriate action following the review;
    (4)   receiving complaints regarding the use or disclosure of PHI from external and internal sources, and taking the appropriate action following the review;
    (5)   ensuring proper business associate agreements contain the appropriate language and provisions as required by the Privacy Rule; and
    (6)   receiving complaints regarding business associate activities or practices, and taking appropriate action following the review.
[Source: Added at 20 Ok Reg 2907, eff 8-21-03 (emergency); Added at 21 Ok Reg 784, eff 4-26-04; Amended at 36 Ok Reg 1777, eff 9-16-19]