What are some practical first steps?
• Develop privacy policies and procedures. • Identify business associates. • Develop a privacy notice. • Decide how you will give notice. • Determine authorization needs. • Decide how you will handle requests for PHI. • Develop a system for managing restrictions on PHI. • Develop a procedure for logging disclosures.