The School of the Osage is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and is therefore subject to HIPAA privacy laws and regulations. The district declares itself a hybrid entity under the law and designates the following components of its operation to be subject to the HIPAA privacy rule:

The district will maintain all protected health information (PHI) in accordance with law. Protected health information does not include information contained in education records covered by the Family Educational Rights and Privacy Act (FERPA) or employment records held by the School of the Osage in its role as an employer.

Protected health information will only be available to designated employees who need to have access to those records in their employment capacity with the district and with other authorized entities. The district will train all employees who may have contact with protected health information on the law and the district’s policies and procedures as necessary and appropriate for the employee’s position. Any employee failing to comply with district policies, procedures or law may be disciplined or terminated.

The district will not intimidate, threaten, coerce, discriminate against or take other retaliatory action against any individual for exercising his or her rights; participating in any process; filing a complaint; testifying, assisting or participating in an investigation, compliance review, proceeding or hearing; or in good faith opposing any act or practice the individual believes is unlawful, in accordance with law.

The district’s privacy official is:

School Nurse-Lake Ozark Campus

P O Box 1960, Lake Ozark, MO 65049

(573) 365-5342 or (573) 365-5343

The district privacy official's duties include, but are not limited to:

► The development and implementation of the district’s policies and procedures regarding protected health information.

► Receiving and evaluating requests for amendments of protected health information.

► Answering questions regarding privacy issues.

► Providing training to district employees.

The district’s contact person is:

School Nurse-Lake Ozark Campus

P O Box 1960, Lake Ozark, MO 65049

(573) 365-5342 or (573) 365-5343

The district contact person's duties include, but are not limited to:

► Receiving and reviewing complaints.

► Providing information about matters covered in the district’s privacy notices.

The district’s security official is:

School Nurse-Lake Ozark Campus

P O Box 1960, Lake Ozark, MO 65049

(573) 365-5342 or (573) 365-5343

The district security official's duties include, but are not limited to:

► Developing and implementing the district’s security policies and procedures.

► Performing tests and assessments of technology safeguards at the direction of the superintendent or designee.

The district’s privacy official, contact person and security official are authorized to utilize an attorney as designated by the superintendent to assist in complying with this policy and with the law.

Federal

20 U.S.C. § 1232g Family Educational Rights and Privacy Act 45 C.F.R §§ 160.101-570 Health Insurance Protability and Accountability Act 45 C.F.R. §§ 164.102-534 Health Insurance Protability and Accountability Act