Technical safeguards : Access control. Implement technical policies and procedures to restrict access to protected electronic health information to authorized persons
Policies and procedures and documentation requirements. : implement reasonable and appropriate polices and procedures to comply with the standards, implementation specifications, and other requirements.
Persons making reports shall not be hindered from making reports nor be subject to sanctions for making reports. Supervisors and administrators may promulgate internal procedures to ensure confidentiality of reports.
The primary attending health care practitioner shall obtain prior written consent from each patient for whom a billing is requested, authorizing the release of the patient's billing.