Designated Record Set
Confidentiality of PHI
Minimum necessary
Treatment, Payment and Operations
HIPAA and HIV-related information
HIPAA and Mental Hygiene Information
Psychotherapy Notes
Breaches of PHI
Requests to Access PHI
Requests to Amend PHI
Requests for Additional Protections
HIPAA and Fundraising
HIPAA and Marketing
Accounting of Disclosures
Privacy of Quality Assurance Records
Privacy Rights of Minors
PHI and Email
Review of Notice of Privacy Practices
Notice of Privacy Practices
HIPAA and Business Associates
Privacy Officer Job Description
Photo Release
Individual Authorization

Corporate Compliance Plan
Corporate Compliance Policies
Board Resolution Regarding
Delegation of Substantial Discretionary Authority
Responsibilities of the Board of Directors Regarding Compliance
Communication of Compliance Activities to the Board of Directors
Compliance-Related Training and Communication
Code of Conduct
Background and Exclusion Checks
Criminal History Record Checks
NYS Child Register Checks
Professional Licensure and Certification Verification and Monitoring
Educational Background Verification
Anti-kickback
Inducement of People Served and Waiver of Co-Payments
Conflict of Interest
Staff Performance, Incentives and Discipline
Preventive Risk Assessment and Annual Compliance Activity Planning
Agency-wide Service Delivery Standards
Medical Clinical Necessity and Utilization Review
Accurate and Timely Documentation of Services
False Claims
Internal Monitoring & Auditing
Non-Compliance Detection and Response, and Confidential Communications
Classification of Compliance Concerns and Investigations
Risk Appetite Assessment of Compliance Matters
Unsupported Claims and Repayment Financial Adjustments
Employee Response to Governmental Investigations
Contractual and Financial Arrangements with Physicians
Political Contributions and Lobbying
Vendor Management
New Government Initiatives related to Compliance
Whistleblower Policy