Are there requirements for covered entities to have written privacy policies?

Question

if so what has to be addressed in the policy?

Answer 1

Yes, there are, they are covered in the HIPAA act. If your state has stricter requirements than  HIPAA does, you are required to go with the one that has the most stringent policies.  I can't give you detailed specifics because that was last semester and I'm not sure where my book is at. Maybe stuff like you have the right to informed consent, and to choose your own provider, and absolutely no one who has your information is allowed to use it for anything else (like selling your info to companies that would use it for marketing purposes, or collection purposes of other bills. Good luck on this, I hope you can get a more detailed answer to this because I can't remember very much on it. My suggestion would be to look up HIPAA and read about it. I think they have numbered points and that's probably what yo are looking for.

Answer 2

If your homework question is talking about hippa or something specific like that, look it up.  If you are trying to ask some general or universal question, try again because it makes no sense.

Answer 3

You are speaking in code, my friend. We need some context here. What do you mean by "covered entities" and "privacy policies"?