BIDMC's Red Flags Policy

I recently wrote about the FTC's Red Flags Rule that must be implemented by August 1, 2009.

Here are the completed BIDMC Policies needed to support this rule. Feel free to use them as inspiration for your own policies.

Red Flags Policy

PV-01 Designation of Organized Health care arrangement

PV-11 Designation of Privacy Officer

PV-14 Mitigating the Effect of an Unauthorized Use or Disclosure of Protected Health Information

PV-17 Business Associate Agreements

PV-19 Opt Out

PV-20 Authentication Policy

Appendix