NEW PURPOSE: Confidentiality and Privacy Policy (HIPAA) 

Policy Number: HS-201 

Effective Date: Jan 1, 2026 

Subject: Protection of Health Information and Personal Privacy 

I. Purpose To establish strict guidelines for the protection of Protected Health Information (PHI) and to ensure that NEW PURPOSE complies with the Health Insurance Portability and Accountability Act (HIPAA) and DDA Rule 0465-02-06. 

II. Policy It is the policy of NEW PURPOSE that all information regarding the persons we support—including medical records, financial data, and personal history—is kept strictly confidential. 

III. Procedures 

  1. Access: Only employees with a legitimate "need to know" to perform their job duties shall have access to the records of persons supported. 
  2. Storage: Electronic records must be password-protected and encrypted. Physical files must be stored in double-locked cabinets within a secure office area. 
  3. Disclosures: No information shall be released to outside parties (including schools, doctors, or other agencies) without a signed "Authorization to Release Information" from the person supported or their legal conservator. 
  4. Disposal: Any paper documents containing PHI must be shredded when no longer needed. 

NEW PURPOSE: Policy on Use of Photographs and Public Performance 

Policy Number: HS-202 

Effective Date: May 12, 2026 

Subject: Prohibition of Unauthorized Public Exposure 

I. Purpose To prevent the exploitation of persons supported and to protect their right to privacy as required by DDA Rule 0465-02-06. 

II. Policy NEW PURPOSE strictly prohibits the use of persons supported in any photographs, video recordings, or public performances for the purpose of marketing, fundraising, or public entertainment without express, specific consent. 

III. Procedures 

  1. Prohibition: Persons supported shall not be required to perform for the public or be used in any way that could be perceived as demeaning or exploitative. 
  2. Consent: If a photo or video is to be taken for any reason other than a clinical requirement (such as a photo for a medical ID), a specific "Media Consent Form" must be signed by the person supported or their legal conservator. 
  3. Right to Revoke: Consent can be revoked at any time. 
  4. Personal Use: Staff are strictly prohibited from taking photos of persons supported on personal cell phones or posting any information/images to personal social media accounts.