Does the board of directors have to approve the HIPAA policies?

We would conclude, yes. Boards of Directors are increasingly more responsible for compliance functions in an agency and under OMH regulations (see Part 595.6(d)(7)), the Board of Directors is responsible to approve agency policies, which includes policies related to confidentiality.

GET INVOLVED With ACL

AND make a difference in the lives of people living with psychiatric disabilities

Scroll to Top