Custodian: The owner(s) of the practice who are ultimately responsible for the collection, use and disclosure of patient health information.   Privacy Officer: Identify the individual responsible for developing, implementing, and overseeing the office-specific Privacy and Security policies.   Health Record Repositories: An office-specific list of the type and location of both analog and digital health records collected and stored by the office.   Physical Safeguards: An office-specific list of the physical safeguards in place to store and protect analog health information and digital hardware in your practice. Administrative Safeguards: An office-specific list of the administrative safeguards in place to protect both digital and analog health information in your practice. Technological Safeguards: An office-specific list of the technological safeguards in place to digitally store and protect health information in your practice.   Information Manager Agreement Template: An office-specific list of information managers and a template IMA agreement to ensure that they are bound to the same standards of protection of health information that your office is. Contractor Privacy Agreement Template: An office-specific list of contractors and a template CPA agreement for them to ensure that they are bound to the same standards of protection of health information that your office is. Confidentiality Oath Template: Ensure that your staff are aware of your Privacy and Security policies and agree to abide by them and maintain all information as confidential.   Privacy Charter: Guiding principles to enable patient care and effective service delivery, while protecting the privacy of patients and practice staff. Roles and Responsibilities: A detailed description of the duties of the Custodian, Privacy Officer, and all Staff in relation to the collection, use, disclosure and protection of health information in your practice. Right of Access and Correction Requests: A process for facilitating requests for access to personal information, or to correct or amend personal information. Collection, Use and Disclosure of Health Information: Requirements for collecting and using health information, and rules for disclosure and when consent is required. Collection, Use and Disclosure of Personal Information: Requirements for collecting, using and disclosing non-health personal information of both patients and staff. Information Handling and Security: Administrative and Technical safeguards to prevent unauthorized access, collection, use, disclosure, or destruction of health information.   Wi-Fi Policy: Best practices for information security regarding wireless networks in your office.   Personal Devices Policy: Best practices for allowing authorized staff members to use personal devices for business purposes. Incident Response: Procedures to report, investigate and follow up on vulnerabilities and incidents that may adversely affect the privacy and security of practice information.   Conversion of Analog to Digital Records: Ensure efficient use of office space through the digitization and/or destruction of patient records having no continuing value.   Quality Assurance:  Monitor and assess the practice Privacy and Security policies and their implementation for ongoing compliance. Quick Start Guide: Get up to speed quickly with our handy Quick Start Guide, designed to help you implement essential Privacy and Security polices and procedures in your practices right away. Staff Training Resources: Comprehensive materials to train your team on Privacy and Security protocols.   Annual Review Checklist: A checklist to ensure ongoing Privacy compliance and continuous improvement.