HIPAA Privacy Rule 164.530e: Sanctions for workforce non-compliance

A covered entity must have and apply appropriate sanctions against workforce members who fail to comply with its privacy policies and procedures or the Privacy Rule, and document the sanctions applied, per 164.530(e).

Maintained by Gerard Blokdyk

Other controls in Administrative requirements (164.530) – HIPAA Privacy Rule

164.530a Designation of a privacy official and a contact person
164.530b Workforce training
164.530c Appropriate administrative, technical and physical safeguards
164.530d Complaints
164.530f Mitigation
164.530gh No intimidating or retaliatory acts; no waiver of rights as a condition of treatment, payment, enrollment or eligibility
164.530i Policies and procedures
164.530j Documentation and record retention (six years)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All HIPAA Privacy Rule controls