Privacy Officer

[alexa]

Can there be more than 1 Privacy Officer for an employer's health plan?

[Chaz]

I am pretty sure the Privacy Rule requires the designation of one person as the "privacy officer" but there is no reason that the duties cannot be delegated as long as one person is ultimately responsible for administering the policies and procedures.

The Privacy Rule also requires the designation of a "contact person" who employees can contact with questions, etc. This contact person does not have to be the same individual as the Privacy Officer (but it can be) so that is another way to split up the HIPAA responsibilites.

[alexa]

I am pretty sure the Privacy Rule requires the designation of one person as the "privacy officer" but there is no reason that the duties cannot be delegated as long as one person is ultimately responsible for administering the policies and procedures.

The Privacy Rule also requires the designation of a "contact person" who employees can contact with questions, etc. This contact person does not have to be the same individual as the Privacy Officer (but it can be) so that is another way to split up the HIPAA responsibilites.

What kind of "liability" is there for split of HIPAA repsonsibilties?

[Chaz]

I am not sure what your specific concerns are. This may be something to speak with your counsel about as you will only get general information on this forum.