SECTION 340:2-8-5. Privacy officer

(a)   The Oklahoma Department of Human Services (DHS) designated a privacy officer to perform the required functions, per Section 164.530 of Title 45 of the Code of Federal Regulations. The contact information is: Oklahoma Department of Human Services, Privacy Officer, PO Box 25352, Oklahoma City, Oklahoma 73125.

(b)   The privacy officer is responsible for:

(1)   developing and implementing DHS privacy policy;

(2)   making decisions regarding the use and or disclosure of protected health information (PHI) when requested for the purpose of:

(A)   judicial and administrative proceedings;

(B)   law enforcement investigations;

(C)   research; and

(D)   marketing;

(3)   reviewing a denial for a client's access to his or her own PHI for reasons indicated in Oklahoma Administrative Code 340:2-8-4(a)(1)(C), and taking appropriate action following the review;

(4)   receiving complaints regarding the use or disclosure of PHI from external and internal sources, and taking the appropriate action following the review;

(5)   ensuring proper business associate agreements contain the appropriate language and provisions as required by the Privacy Rule; and

(6)   receiving complaints regarding business associate activities or practices, and taking appropriate action following the review.

[Source: Added at 20 Ok Reg 2907, eff 8-21-03 (emergency); Added at 21 Ok Reg 784, eff 4-26-04; Amended at 36 Ok Reg 1777, eff 9-16-19]