A hospital updates its privacy policies after a regulatory change. Which action best satisfies the Privacy Rule's requirement that policies and procedures be maintained in written form?
Tap an answer to reveal the correct answer, rationale and source.
Answer:
The Privacy Rule requires covered entities to implement and maintain written policies and procedures, and to retain that documentation for the specified period. An oral announcement or an unofficial draft does not meet the written-form and retention duties.
Source: 45 CFR 164.530(i)
