New Mexico Administrative Code
Title 8 - SOCIAL SERVICES
Chapter 8 - CHILDREN, YOUTH AND FAMILIES GENERAL PROVISIONS
Part 5 - PRIVACY OFFICE
Section 8.8.5.15 - TRAINING AND PERSONNEL PRACTICES

A. The department provides HIPAA training to all covered workforce within a reasonable period of time after initial employment and will provide notice and training, if necessary, of material changes in HIPAA policies and procedures within a reasonable time after the change occurs. All training is documented in written or electronic form and retained by the department for six years.

B. The department's policies regarding employee discipline for HIPAA violations and prohibiting retaliation are contained in its code of conduct. The privacy office will investigate all alleged violations and initiate any appropriate disciplinary action.