HomeMy WebLinkAbout3673 RESOLUTION NO. 3 6 7 3
A RESOLUTION OF THE CITY COUNCIL OF THE CITY OF
AUBURN, WASHINGTON DETERMINING THAT THE CITY
OF AUBURN TAKE ACTION TO COMPLY WITH HIPAA
WHEREAS, the Health Insurance Portability and Accountability Act ("HIPAA") of
1986 ("Act") sets federal standards for the protection of personal health information
collected by entities covered under the Act; and
WHEREAS, the City of Auburn ("City") is a hybrid covered entity under the Act
due to the nature of some of the business it conducts and,
WHEREAS, the City acts as a covered entity by providing Basic Life Support
ambulance services and charging for those services through a billing service which
conducts financial and administrative transactions electronically; and
WHEREAS, the City self-insures certain health care benefits; and
WHEREAS, the City Council recognizes that departments that perform covered
functions, or that perform activities that would make them business associates of a
department or other covered entity that performs covered functions, are required to
comply with the HIPAA Privacy Rule to protect the privacy and security of health
information; and
WHEREAS, the HIP,AA regulations define a hybrid entity as a single legal entity
that is a covered entity whose business includes both covered and non-covered
functions; NOW, THEREFORE,
THE CITY COUNCIL OF THE CITY OF AUBURN, WASHINGTON, HEREBY
RESOLVES AS FOLLOWS:
Resolution No. 3673
December 11, 2003
Page 1 of 3
Section 1. The City of Auburn is designated as a "Hybrid Entity" under the
Health Insurance Accountability and Accountability Act.
Section 2. The following City departments and offices are designated as
health care components pursuant to 45 CFR 164.504: Auburn Fire and EMS, and
Human Resources which shall perform covered functions including but not limited to
sponsoring self-funded health plans including a vision health plan and paying for health
plan benefits authorized by the LEOFF Disability Board.
Section 3. The Mayor is directed to issue administrative memoranda, as
necessary to designate additional departments of the City that are covered by HIPAA
and to adopt policies as required to comply with HIPAA.
Section 4. The Mayor is further authorized to sign Business Associate
agreements separate from contracts for services, to appoint a privacy official for each
component who will be the component's contact for all matters relating to HIPAA,
including complaints from individuals and to designate an employee to serve as the
City's Privacy Officer.
Section 5. The aforementioned City departments and offices, because of their
limited collection of protected health information and support functions necessary for the
covered functions, are required to train staff regarding confidentiality policies and
procedures necessary to fulfill the intent of HIPAA.
Section 6. This Resolution shall be in full force and effect upon passage and
signatures hereon.
DATED this .~ ~L.. day of ~Z.c~z~¢z.~_,_..¢..
,2004.
CITY
PETER B. LEWIS
MAYOR
Resolution No. 3673
December 11,2003
Page 2 of 3
ATTEST:
Danielle E. Daskam,
City Clerk
APPROVED AS TO FORM:
~D~niel B. He[cf
City Attorney
Resolution No. 3673
December 11, 2003
Page 3 of 3