(a) Part 160 and Subparts A and E of Part 164 of Title 45 of the Code of Federal Regulations constitute the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule, which provides protection for the privacy of health information.

(b) The purpose of this Subchapter is to describe the Oklahoma Department of Human Services (OKDHS) privacy policies contained in the Privacy Rule.  OKDHS privacy policies are intended to:

• (1) protect clients' medical records and other personal health information;
• (2) give clients more control over their protected health information (PHI);
• (3) set boundaries on the use and disclosure of PHI; and
• (4) hold violators accountable.

(c) Employees who violate OKDHS privacy policies are disciplined in accordance with DHS:2-1-7(g)(2)(A) and may be subject to sanctions set forth by the Department of Health and Human Services.