News & Media |  Donate  |  Contact Us |   
SFDPH Home
Search
 
Frequently
Asked Questions
  
San Francisco Health Network
Knowledge Sharing & Collaboration

San Francisco Department of Public Health Privacy Practices


Privacy Policies


 
TITLE POLICY NUMBER REVISION DATE
GENERAL
A.1.0
09/23/2013
HIPAA Compliance – Admin Policies
A.2.0
11/01/2012
HIPAA Compliance – Patient/Client Resident Rights regarding Protected Health Information (PHI)
A.3.0
04/2013
BREACHES
B.1.1
07/28/2016
Major Privacy Breach Emergency Quick Reference Response Guide
B.2.0
SHARING POLICIES
C.1.0
09/23/2013
DPH Privacy Policy Matrix - Sharing Protected Health Information for Treatment
C.3.0
12/19/2013
Use of PHI in Disciplinary Hearings and Proceedings Investigations
C.4.0
01/12/2009
Special Situations Governing the Release of Information - Duty to Warn and Protect Third Parties in Response to a Client Threat
C.5.0
09/13/2013
Special Situations Governing the Release of information - Child Abuse and Neglect Reporting Act
C.6.0
10/29/2013
Special Situations Governing the Release of Information - Elder and Dependent Adult Release
C.7.0
10/29/2013
Reporting Individuals with Lapse of Consciousness to DMV
C.8.0
01/12/2009
Consent for Minors: Urgent, Primary Care & Behavioral Health Services; Confidentiality; Obligations
C.9.0
12/01/2005
Victims of Dependent Adult/Elder Abuse, Child Abuse, Assaultive & Abuse Conduct and Rape Sexual Assault
C.10.0
05/01/2013
Response to a Request from Law Enforcement
C.11.0
04/01/2015
HIPAA Compliance: Social Media Policy
C.12.0
07/06/2015
Patients, Visitors and Staff Photo/Audio/Video Recording (Clinical and Operations Purposes)
C.13.1
03/01/2016
FORM: Consent to Record/Authorization for Publication
C.14.1
09/30/2015
FORM: Request to Amend Protected Health Information (PHI)
C.15.0
07/01/2013
SFDPH Business Associates Agreement (BAA) Contract Exhibit E
C.16.0
08/04/2017
SFDPH Privacy and Security Agreement (PSA) Contract Exhibit E
C.17.0
06/21/2017
SFDPH Attach 1 Attestation PRIVACY, version 6/7/2017
C.18.1
06/07/2017
SFDPH Attach 2 Attestation DATA SECURITY, version 6/7/2017
C.18.2
06/07/2017
SFDPH Attach 3 Attestation COMPLIANCE, version 6/7/2017
C.18.3
06/07/2017
STORING AND DELIVERING PHI
D.1.0
05/13/2010
FORM: Secure Delivery of PHI - Cover sheet for fax or mailing
D.1.1
05/13/2010
*NEW* Sending Electronic Messages to Adult Patients            
D.1.2
06/01/2017
RESEARCH/EVALUATION
E.1.0
05/11/2011
FORM: DPH Research Proposal Approval
E.3.0
05/11/2011
Research Misconduct: Definitions and Procedures
E.4.0
02/10/2014
FORM: DPH Health Information Data Use Agreement Form
E.5.1
04/21/2011
AGREEMENTS
F.1.0
03/19/2015
F.2.0
06/20/2016
FORM: SFDPH Code of Conduct Acknowledgement Form
F.3.0
06/20/2016
RETENTION & STORAGE OF PHI
G.1.0
10/01/2008
Security & Retention of Medical Records
G.2.0
02/29/2016
Electronic Recordkeeping
G.3.0
12/02/2010
FORMS - HIPAA PRIVACY RIGHTS
Summary Notice of HIPAA Privacy Practices Poster Kit
English
H.1.1
05/19/2015
Spanish
H.1.2
05/19/2015
Chinese
H.1.3
05/19/2015
Russian
H.1.4
05/19/2015
Tagalog
H.1.5
05/19/2015
Vietnamese
H.1.6
05/19/2015
Summary Notice of HIPAA Privacy Practices and Acknowledgement of Receipt Forms
English
H.2.1
05/19/2015
Spanish
H.2.2
05/19/2015
Chinese
H.2.3
05/19/2015
Russian
H.2.4
05/19/2015
Tagalog
H.2.5
05/19/2015
Vietnamese
H.2.6
05/19/2015
Full Notice of HIPAA Privacy Rights
English
H.3.1
05/19/2015
Spanish
H.3.2
05/19/2015
Chinese
H.3.3
05/19/2015
Russian
H.3.4
05/19/2015
Tagalog
H.3.5
05/19/2015
Vietnamese
H.3.6
05/19/2015
Authorization for Release or Disclosure of PHI
CBHS English
H.4.1
01/27/2005
CBHS Chinese
H.4.2
01/27/2005
CBHS Russian
H.4.3
01/27/2005
CBHS Spanish
H.4.4
01/27/2005
CBHS Vietnamese
H.4.5
01/27/2005
CHN English
H.4.5
03/01/2005
HIPAA - ALL STAFF MEMOS REGARDING PRIVACY & COMPLIANCE
I.1.0
10/12/2015
May I confirm I have the right person?
I.2.0
10/22/2015
Is it Research or Health Care Operations?
I.3.0
11/04/2015
New HIPAA Notice Forms
I.4.0
12/01/2015
Before considering cloud-based shared drives
I.5.0
12/15/2015
Licensing Board Levy Fines
I.6.0
01/21/2016
Using DPH Internet for Personal use
I.7.0
02/08/2016
Recording in SFDPH Facilities
I.8.0
02/10/2016
Using personal email accounts at work causes problems
I.9.0
02/17/2016
New DPH Hotline Posters please place in prominent area at your site
I.10.0
02/19/2016
Emailing and PHI
I.11.0
02/22/2016
Alert - Phishing Emails
I.12.0
03/04/2016
Please Complete Your Annual Privacy and Compliance Requirements
I.13.0
03/17/2016
Supervisor/Manager: Immediately Report These Concerns
I.14.0
04/06/2016
Email Messaging Patients/Clients
I.15.0
06/03/2016
Controller's Office Whistleblower Program I.16.0 07/08/2016
Privacy Warning needed? Pokemon Go I.17.0 07/26/2016
Blocking of Third Party Email (TPE) Programs I.18.0 09/23/2016
Blocking of Facebook and LinkedIn (Social Media) I.19.0 11/30/2016
Privacy Pulse eNewsletters
J.1.0
4/1/2013
Topics: Unauthorized Disclosure Trauma/PHI & Lost/Stolen PHI J.2.0 7/1/2013
Topics: New patient rights, Decedent's PHI & Student Immunization
J.3.0
9/1/2013
Topics: Access records, Confidential Bins, Voicemail, Mail error
J.4.0
12/1/2013
Topics: Patient List Containing PHI, Lost/Stolen Electronic Devices
J.5.0
3/1/2014
Topics: Med Records of Family, Friends, & Your Own and Penalties for Inappropriate Access
J.6.0
6/1/2014
Topics: Protect, Encrypt, Secure & Shred PHI and Report Breach
J.7.0
9/1/2014
Topics: Guidelines for Releasing PHI -Patient Request, Emergency & Confirming ID of patient
J.8.0
12/1/2014
Topics: Wear ID, Physical & IT Security
J.9.0
1/1/2015
Topics: Safeguard Paper PHI, PHI in workspace & Report Lost/Theft/Misdirected PHI
J.10.0
4/1/2015
Topics: Prevent Unauthorized Disclosure of PHI, What is Disclosure, Fines & Penalties
J.11.0
7/1/2015
Topics: Safeguarding ePHI - Electronic Devices, Pagers, Secure Email and Password
J.12.0
11/1/2015
Topics: Limits to Accessing PHI & No snooping
J.13.0
2/1/2016
Topics: Photographing, Videotaping, Media & Social Networking
J.14.0
5/1/2016
Topics: Handling PHI-paper, fax, mailing & traveling; Verbal Disclosure of PHI
J.15.0
8/1/2016
Topics: Unauthorized Access, Unauthorized Use, Unauthorized Access to own medical record
J.16.0
11/1/2016
Topics: Minimum Necessary Tips, Disclosure to patient, Reporting a Privacy Breach
J.17.0
3/1/2017