Oregon Statutes 441.101 – Safeguards for protected health information; rules
(1) As used in this section, ‘protected health information’ has the meaning given that term in ORS § 192.556.
Terms Used In Oregon Statutes 441.101
- Fiscal year: The fiscal year is the accounting period for the government. For the federal government, this begins on October 1 and ends on September 30. The fiscal year is designated by the calendar year in which it ends; for example, fiscal year 2006 begins on October 1, 2005 and ends on September 30, 2006.
(2) A health care facility shall file with the Oregon Health Authority a protection of health information report no later than 120 days following the close of each fiscal year. The report may be in the form of a letter, must be signed by the chief executive officer of the facility and must:
(a) State the responsibility of the health care facility’s management to establish and maintain adequate safeguards and procedures for protecting the confidentiality of personally identifiable and protected health information that the facility retains in electronic and hard copy form;
(b) Contain an assurance that there is ongoing evaluation and monitoring of the effectiveness of the safeguards and procedures in protecting the confidentiality of personally identifiable and protected health information;
(c) Contain assurances that the signing officer has disclosed to the board of directors of the facility:
(A) All significant deficiencies in the design or operation of recordkeeping systems or controls that could adversely affect the facility’s ability to protect the confidentiality of personally identifiable and protected health information;
(B) Any breaches of the security of personally identifiable and protected health information, whether material or not, that involve management, staff or employees of the facility who have a significant role in the facility’s recordkeeping systems or controls; and
(C) All necessary steps that have been taken to address deficiencies in the design or operation of recordkeeping systems or controls and to resolve any material weaknesses identified by the facility; and
(d) Contain assurances that the signing officer has identified for the board any material weaknesses in the recordkeeping systems or controls.
(3) The authority may adopt all rules necessary to carry out the provisions of this section.
(4) The protection of health information report is confidential and not subject to disclosure under ORS § 192.311 to 192.478. [2015 c.133 § 4]
441.101 was added to and made a part of ORS Chapter 441 by legislative action but was not added to any smaller series therein. See Preface to Oregon Revised Statutes for further explanation.
[1981 c.534 § 2; 1985 c.153 § 2; 2013 c.717 § 2; renumbered 441.403 in 2015]
[Amended by 1955 c.464 § 1; 1965 c.308 § 1; repealed by 1971 c.730 § 25]
[1981 c.534 § 3; renumbered 441.404 in 2015]
[1981 c.534 § 4; 1985 c.153 § 3; 2001 c.900 § 172; 2009 c.768 § 32; 2013 c.717 § 3; 2014 c.117 § 10; renumbered 441.406 in 2015]
[Amended by 1955 c.464 § 2; 1965 c.308 § 2; repealed by 1971 c.730 § 25]
BILL OF RIGHTS FOR LGBTQIA2S+
RESIDENTS AND RESIDENTS LIVING WITH HIV