North Dakota Administrative Code
Title 113 - North Dakota Health Information Network
Article 113-02 - North Dakota Health Information Network
Chapter 113-02-01 - North Dakota Health Information Network
Section 113-02-01-04 - Authorized participants

Universal Citation: ND Admin Code ยง 113-02-01-04

Current through Supplement No. 392, April, 2024

1. Access. The North Dakota health information network grants the rights to access the North Dakota health information network to participants and authorized users with a legitimate business need for purposes of treatment, obtaining payment for treatment, health care operations, to comply with public health reporting requirements, and as required by law.

2. Participant agreement requirement. Participants must execute a participation agreement with the North Dakota health information network prior to being granted access. Access and use of the North Dakota health information network is nontransferable by the participant.

3. Responsibilities. Participants shall identify all of its authorized users in accordance with the North Dakota health information network policies and procedures. The North Dakota health information network shall establish a unique identifier for each authorized user.

a. Access to an individual's protected health information shall be based on the authorized user's job function and relationship to the individual according to policies and procedures established by the North Dakota health information network.

b. Participants shall notify the North Dakota health information network within twenty-four hours of any authorized user who by reason of termination of employment or otherwise is removed as an authorized user.

c. Participants shall provide training for all of its authorized users consistent with the participant's and North Dakota health information network policies, including privacy and security requirements.

d. The participant may suspend, limit, or revoke the access authority of an authorized user on its own initiative upon a determination that the authorized user has not complied with the participant's or the North Dakota health information network policies. The participant shall be responsible for informing the North Dakota health information network immediately, and in any case within twenty-four hours, of any revocation or suspension.

4. Notification of breach. If an actual or suspected breach relates to the North Dakota health information network, participants shall notify the North Dakota health information network in the most expedient time possible and without unreasonable delay following discovery but no later than established policies of the North Dakota health information network and pursuant to 45 CFR 164, subpart D.

General Authority: NDCC 54-59-26

Law Implemented: NDCC 23-12-19, 54-59-25, 54-59-26, 54-59-28, 54-59-29

Disclaimer: These regulations may not be the most recent version. North Dakota may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.