113-02-01-08. Privacy and security protections.

Appropriate safeguards must be used to prevent use or disclosure of protected health information other than permitted by the North Dakota health information network policies, including appropriate administrative, physical, and technical safeguards that protect the confidentiality, integrity, and availability of protected health information through the North Dakota health information network.

1. At a minimum, appropriate safeguards shall be those identified in 45 CFR part 164, subpart C; and other applicable federal and state standards.

2. The North Dakota health information network shall report to a participant any successful unauthorized access, use, disclosure, modification, or destruction of a participant's electronic protected health information of which the North Dakota health information network is aware.

History: Effective January 1, 2014.

General Authority: NDCC 54-59-26

Law Implemented: NDCC 23-12-19, 54-59-25, 54-59-26, 54-59-28, 54-59-29