Assignment 3
HIPAA Privacy Rule
The administrative requirements under the HIPAA Privacy Rule were created to cover the
broad spectrum of the healthcare environment. Privacy Policies and Procedures have to be
consistent with the Privacy Rule, but where larger organizations may require more robust legal
language; a smaller facility may not have policies that are as long in documentation. Privacy
Personnel must consist of a privacy official that is a contact person for privacy issues and is
responsible for maintaining privacy policy and procedures. This person is typically dedicated in
larger organizations and can be someone that has other duties in smaller facilities (HHS.GOV,
2003). Workforce Training and Management are responsible for training all workforce in privacy
policies and procedures. They are also responsible for leveling sanctions on violations of the
Privacy Rule, policies, and procedures. Mitigation will mitigate any issues caused by improper
