|
Signed compliance letter (by Governing Body Chair + CEO)
|
|
|
|
|
|
Compliance review procedures (laws, codes, operations, services)
|
|
|
|
|
|
(Networks only) Procedures for provider compliance
|
|
|
|
|
|
Most recent internal compliance review results
|
|
|
|
|
|
Governing Body minutes: discussion of legal compliance
|
|
|
|
|
|
Relevant programme/operations licenses
|
|
|
|
|
|
Regulatory/licensing reports (adverse findings or loss of licensure)
|
|
|
|
|
|
(Networks only) Copies of provider licenses & legal documents (in managing office)
|
|
|
|
|
|
Procedures: quarterly risk review
|
|
|
|
|
|
Procedures: investigation/review of critical incidents
|
|
|
|
|
|
Quarterly risk management reports
|
|
|
|
|
|
Independent investigation results (critical incidents)
|
|
|
|
|
|
Governing body/management minutes on risk management reviews
|
|
|
|
|
|
Notification to staff/board on insurance coverage (scope + limits)
|
|
|
|
|
|
Policy: legal assistance to personnel facing claims
|
|
|
|
|
|
(Networks only) Procedures to identify/verify provider insurance
|
|
|
|
|
|
Current insurance policies (with descriptions, amounts, dates)
|
|
|
|
|
|
Most recent annual insurance needs assessment
|
|
|
|
|
|
(Networks only) Insurance verification docs + provider communication
|
|
|
|
|
|
Technology assessment
|
|
|
|
|
|
Info management procedures/guidelines
|
|
|
|
|
|
Agreements with IT vendors/business associates (if applicable)
|
|
|
|
|
|
Data security policies
|
|
|
|
|
|
Data security procedures (HIPAA included if applicable)
|
|
|
|
|
|
Policies: social media, electronic communication, mobile device use
|
|
|
|
|
|
Procedures: same as above
|
|
|
|
|
|
Data interruptions/disaster recovery plan
|
|
|
|
|
|
Agreements with third parties (again, if applicable)
|
|
|
|
|
|
HIPAA compliance review results
|
|
|
|
|
|
Contracting procedures
|
|
|
|
|
|
List of contracts/service agreements/MOUs
|
|
|
|
|
|
Actual contracts/service agreements/MOUs
|
|
|
|
|
|
Board minutes from past 12 months showing contract reviews
|
|
|
|
|
|
Contract monitoring procedures
|
|
|
|
|
|
Contracts (again – for monitoring purposes)
|
|
|
|
|
|
Contractor progress reports
|
|
|
|
|
|
Contract remediation documentation (as applicable)
|
|
|
|
|