Ordinance 68109

Summary

An Ordinance pertaining to the Health Insurance Portability and Accountability Act of 1996, P.L. 104-91 (hereinafter HIPAA); repealing Ordinance 66281 and enacting in lieu thereof a new ordinance providing for compliance by the City with both the HIPAA Standards for Privacy of Individually Identifiable Health Information, 45 C.F.R. Part 160 and Part 164, Subparts A and E (the Privacy Rule) and the HIPAA Security Standards for the Protection of Electronic Protected Health Information, 45 C.F.R. Part 160 and Part 164, Subparts A and C (the Security Rule); re-designating the City’s Hybrid Entity Health Care Components, with removal of the Health Department from such designation; re-designating the City’s Business Associate Components, with removal of the Department of Public Service Building Division, and requiring Business Associate Components to meet certain requirements of the Privacy Rule and Security Rule; appointing the City Privacy Officer and the Privacy Officers for each of the designated Health Care Components, providing for their duties, and providing for amendments of such designations; appointing the City Security Officer and the Security Officers for each of the designated Health Care Components, providing for their duties, and providing for amendments of such designations; authorizing the Health Care Component Privacy Officers, upon recommendation of the City Counselor, to enter into Business Associate Agreements in compliance with the Privacy Rule and the Security Rule, and upon recommendation of the City Counselor and the Board of Estimate and Apportionment, to enter into all other agreements required for compliance with the Privacy Rule and the Security Rule; and providing for a sever severability clause.

Download